last executing test programs: 8m19.299522431s ago: executing program 3 (id=5458): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{0x0}], 0x1}, 0x40844) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00aa19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e468eea3fcfcf498278a315f5b87e1c26433a8acd715f5888b2007f00000000000000000100000000000000010015d60605000053350000000034a70c2ab40c7cf5691db43a5c00000000000000f030007ce2c6f800000000000000e75a89faff01218087560cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bef5d7d617da7a6520655a805608df4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf050000008600a62e96b7cb8e52cbdc2ba9d580609e31c30879d6fce424c2208af6c3784a1975fa657de38a3a32e4fd67ce446adb431d07db79241aca1dd9ba02453bbb5ee8babe1745e645f091231b986e952afdac972f342c6f184777d05d988d6edc71df0100000013a38300cabf2b554380ad215c789bef4cc574109b8df8d9a9db669557b3809d8c396d2c0361629d1822f722ec23812770d72cd00100000078a75dea785be550dbb420287e0789b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b8a0ae6fb5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fc7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff25184d4e3c6f7f623559435b2c505fb711300000000040000000000000000000000000000e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7a49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd029406000000433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671a5767014b09ddbf69b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7b49991be06b950ccd48f4e49833f3c4a02bbd06c84680549f9eb16682ecb722e8ffaca907a3eaaebfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c52108d9c0d51dc30209872ec602af42eb29d54a37be0fdfdcd74c2d859a566ee5c30677173a2592a4617ae08bec07422d52d2ba7271550a5c20e3a8d1c8c8fd3025ff00607b2249ae9a18391e01b21b36169790b8e96f7955754b6b01a75165d3573d1dec5cf1b08b6115b43203a5654cce2277eb4c02ef4817b4cb989ac178895810eff7b697f2dc9b308aa2460e3cb85cdc4833571a62bf310700000000000000cc7f923284230ada8c756096a66119d4b6b2f159585c3cf8e7bfdd619e294b1d21cd491b8cfd4a253856e485fe29c6ad177a9fb078ca905782b9ed3c30675b89a784bb8031cac0de95178a5acff029a0f0fe972df22b20afe95fba722056f94ab15f1cf605c33df627311f1b614684d77549"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001f80)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff892f00004000633277fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(r2) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x6b}, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/184}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) socket$kcm(0x15, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x42) socket$kcm(0x10, 0x2, 0x0) 8m18.85366764s ago: executing program 3 (id=5468): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x8, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000925645707", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10106) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9111a04000a740100053582c137153e3702df0c", 0x23}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000007c0), &(0x7f0000001500)}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000ff2f507f62aa6172f7881"], 0x33fe0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x50, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3}, 0x40, 0x3, 0xfffffffc, 0x7, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) 8m18.485456642s ago: executing program 3 (id=5477): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x20000000000000c8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x50) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000800000000000000072dfff000000000020000000000000008400000008000000eeb4fe8ba15e3999ef000000"], 0x38}, 0x41) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) 8m18.120284274s ago: executing program 3 (id=5482): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c0000", 0xb7}], 0x1}, 0x4009080) 8m17.979617377s ago: executing program 3 (id=5488): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 8m17.49199557s ago: executing program 3 (id=5491): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x3c2cd06dd4e666f}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x200007, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00', @ANYBLOB="8b", @ANYRESHEX=r2], 0xfe33) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r13}, 0x38) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x5a) r14 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r14, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1b000000190081084e81f782db44b904021d080006067c09e8fe55b814c0715b53de7ef4b42af6a27eec8e180ea8465032c3a2a4d88c85a9c61a9eb7b80d748aee735945c8", 0x45}], 0x1, 0x0, 0x0, 0x6000}, 0x0) syz_clone(0x2e102800, 0x0, 0xfffffe29, 0x0, 0x0, 0x0) 8m2.438849482s ago: executing program 32 (id=5491): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x3c2cd06dd4e666f}, 0x880, 0x800, 0x0, 0x8, 0x0, 0x200007, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00', @ANYBLOB="8b", @ANYRESHEX=r2], 0xfe33) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r13}, 0x38) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[], 0x5a) r14 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r14, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1b000000190081084e81f782db44b904021d080006067c09e8fe55b814c0715b53de7ef4b42af6a27eec8e180ea8465032c3a2a4d88c85a9c61a9eb7b80d748aee735945c8", 0x45}], 0x1, 0x0, 0x0, 0x6000}, 0x0) syz_clone(0x2e102800, 0x0, 0xfffffe29, 0x0, 0x0, 0x0) 6.063158898s ago: executing program 0 (id=11708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000080)="d2df03c4ff4f84e5fbd9cb4608008cdd8af46937", 0x0, 0x95b2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa02f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x3e, 0x3, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r6}, 0xc) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0xed, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f0000000300), &(0x7f00000003c0)=r7}, 0x20) 5.667390772s ago: executing program 0 (id=11713): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 5.479012319s ago: executing program 0 (id=11717): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0x1, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xee, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f80)={r2, 0x58, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x1b, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0x7, 0x9, 0xa, 0x10, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0xa, 0x1, 0xfffffffffffffff4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001100)=[r2, r2, r2, r2, r2, r2, r2, r2, r4, r5], &(0x7f0000001140)=[{0x3, 0x3, 0x5, 0x1}, {0x4, 0x4, 0xa, 0x2}, {0x4, 0x3, 0x1, 0x6}, {0x1, 0x3, 0xa, 0x6}, {0x2, 0x2, 0xf, 0x1}, {0x1, 0x1, 0x6, 0x6}, {0x2, 0x4, 0x3, 0x9}, {0x5, 0x5, 0x0, 0xa}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x0, r0}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x44934, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x104050, 0xc8, 0x2, 0x4, 0x6, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300331123000000000000000000000000ac1414aa"], 0xfdef) 5.311488093s ago: executing program 0 (id=11719): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x823}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x41, 0x0, 0x8f00) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 4.887588571s ago: executing program 0 (id=11724): r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x48, 0x3}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1000000e7aca990b459bb67272002ce60b02", 0x12}], 0x1}, 0x20000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000440)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000100)=""/108}, 0x20) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/35, 0x23}, 0x0) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r0, 0x0, 0x4, &(0x7f0000000180)='some'}, 0x30) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000cd0300000b00000000000000", @ANYRES32], 0x50) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX=r5], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8924, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x33fe0) 4.562781329s ago: executing program 0 (id=11728): r0 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={0x1, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xee, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f80)={r2, 0x58, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8, '\x00', r1, 0xffffffffffffffff, 0x5, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x1b, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0x7, 0x9, 0xa, 0x10, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x3, 0xa, 0x1, 0xfffffffffffffff4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001100)=[r2, r2, r2, r2, r2, r2, r2, r2, r4, r5], &(0x7f0000001140)=[{0x3, 0x3, 0x5, 0x1}, {0x4, 0x4, 0xa, 0x2}, {0x4, 0x3, 0x1, 0x6}, {0x1, 0x3, 0xa, 0x6}, {0x2, 0x2, 0xf, 0x1}, {0x1, 0x1, 0x6, 0x6}, {0x2, 0x4, 0x3, 0x9}, {0x5, 0x5, 0x0, 0xa}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x0, r0}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x44934, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x104050, 0xc8, 0x2, 0x4, 0x6, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300331123000000000000000000000000ac1414aa"], 0xfdef) 1.988262335s ago: executing program 5 (id=11771): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) getpid() r3 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0xf, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01000020109b"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000280)=r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000e62c0000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xffffff28}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89fb, &(0x7f0000000080)) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f2d00000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080) 1.70251459s ago: executing program 5 (id=11775): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 1.620802457s ago: executing program 5 (id=11777): r0 = syz_clone(0x10241000, &(0x7f00000000c0)="4e29d63467da3d789cb6a622cf980756f51b08fa997a86a6920419464bece379598f2c05268b83a8634395d4e2116a3581227b436612423056cad1d50246dbf5354228f9ad10ae5884601665f9a15e9bded666fdd7d7b2a68a1d7d255b713082fe83b2f5daf78597b214f770a43189580f91e1af1c33bbd114bb3c4deb9f24834690e29c30d5db23f5b510541d346da39c21070287", 0x95, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)='k9') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, r0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x9}]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1}]}, {0x0, [0x61]}}, &(0x7f00000014c0)=""/224, 0x27, 0xe0, 0x1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b1b4a5dddaebc53bb40000000000000061144cc9003b080000000000a600000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x9, &(0x7f00000000c0)=r4, 0x4) socket$kcm(0x25, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.581301291s ago: executing program 2 (id=11778): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e240000000000004504040001ffffff9404000001000a00b7040000000100006a0af2fe000000008500000078000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac181c96606dbc967673aca98d6f5637b20fd2809a29ea5e40139a19415f7fc5d852209bdfed74008651752b5e052412d3e00a44417b7caf91a173925a66ee6e30723e73f3b7d66d2a5d"], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 1.529155916s ago: executing program 4 (id=11779): r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x48, 0x3}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1000000e7aca990b459bb67272002ce60b02d25a806f8c", 0x78}], 0x1, 0x0, 0xcf}, 0x20000800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000440)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000100)=""/108}, 0x20) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/35, 0x23}, 0x0) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r0, 0x0, 0x4, &(0x7f0000000180)='some'}, 0x30) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000cd0300000b00000000000000", @ANYRES32], 0x50) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX=r5], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8924, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x33fe0) 1.494395009s ago: executing program 1 (id=11780): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0x10000005, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x3, @perf_config_ext={0xbd0b, 0x5}, 0x115e0, 0x0, 0x0, 0x3, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000d00)={0x3, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0x1, 0x0, 0x40, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x8726}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45", 0xc}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4d, 0x0, 0x42) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000100)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffea) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @local}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x14, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00146400000071101b00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)}, 0x10) 1.339790192s ago: executing program 4 (id=11781): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001930000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="140000002d000b63717a3c4a7ad8985b0808aa78", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0x142, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x8, 0x0, 0x0}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) r5 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0x2, &(0x7f0000000040)=r6, 0x17) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000094d21c961146c00000000000500ffff000000009500000002000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', r4, @sock_ops}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_freezer_state(r7, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.327787214s ago: executing program 2 (id=11791): r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x48, 0x3}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1000000e7aca990b459bb67272002ce60b02d25a806f8c", 0x78}], 0x1, 0x0, 0xcf}, 0x20000800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000440)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000100)=""/108}, 0x20) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/35, 0x23}, 0x0) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r0, 0x0, 0x4, &(0x7f0000000180)='some'}, 0x30) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000cd0300000b00000000000000", @ANYRES32], 0x50) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX=r5], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8924, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x33fe0) 1.239184421s ago: executing program 5 (id=11782): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (fail_nth: 2) 900.015191ms ago: executing program 5 (id=11783): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000d9a29be9aae49299110000", @ANYRES32=r4, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000200)=@ieee802154, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000300)=""/208, 0xd0}, {&(0x7f0000000540)=""/119, 0x77}], 0x4}, 0x10000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000700)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYBLOB="caf830ab5f0c9247e3338b7a608771fcd077c1821a525c42118781e580b1494b06988c4b9b7ee338f6085e2c91b94c964cdd1db90c18bf4d218c135f3a0f4942a03778be491bf117345c891a2f10d1a76a9a74234975e90524f2d1b9d4e2cb240437bcc8f337e8ae40a17481e9cf867464b1663538e707f44ee94e216bc967e2854a30056854b10012bca0a6953dcb288e9b53391603d8ffdb1d5dfc146e76aca5513b35", @ANYRES16=r1, @ANYRES16, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r7, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r8 = socket$kcm(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/uts\x00') perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x1, 0x2, 0xfc, 0x0, 0x4, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x7ffffffffffffffc, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c", 0x1a}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) close(r8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfe33) 849.173175ms ago: executing program 2 (id=11784): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), 0x0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1081, 0x5, 0x8, 0x0, 0x8, 0x7, 0xffff, 0x0, 0x579, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r9, 0x29, 0x15, &(0x7f00000000c0), 0xb9) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000540)=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000081}, 0x20050) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="5c00000010006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee5080000000000000056a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c44608df20c0f59b", 0x57}, {&(0x7f0000000880)="03faa63ef2", 0x5}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 847.545136ms ago: executing program 1 (id=11785): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000002c0)="eefd1c602bb7d4f828b255cd934c7897fbf2b41fe7f14f5ba8654d5168f8bc570b5abef961c27730cfe7eb9b5c4623315ffd33df3abe2063fd4a7ed4d58046bf6b5bb0cc57475610a0f2a95931d4d07d586f5c8b", &(0x7f0000000380)=""/178}, 0x20) socket$kcm(0x10, 0x2, 0x0) socketpair(0x2b, 0x80000, 0x8, &(0x7f0000000300)) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x9480, 0xfffffffffffffffc, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="66b08e3fa46ba5355e51ed162cd5c302811c8057b04decaf25c86c4930aeb54a3c383b6cb6cbf70bdd9ac24842b2580367d43a", 0x33}, {&(0x7f0000000080)="73aca6c0fb50b90721e76295558b7a8315df87720f91e0d05625d760a5302ff48dbb80878ae5502a2439db6f6f51cd892b1eb25d1aead24c7320799ca1c9bdede3732e8ff15a17bc5221d6800c3fedfb0fc2d5bb309297789f8dbc29cb81b7e59f5fc89fbb6750cb923e27949cf31ec57c8818657021e9485e5837b5a9a3f50011f200f99529984cf01ba09b5895ee2699e3b7eaed8ca7267eb7be25f6692d49628dbcaba64c98c23aec96cc5daf", 0xae}, {&(0x7f0000000140)="68637f6547988e2a2ddc5dc2b5609b9eaa6385a67c1730ce5a1f3475fad03c2814", 0x21}, {&(0x7f0000000180)}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x18}, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000009800000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000000010121595611f746ff991f28edeb4a47746318814053b38c9bf478e56ec447c01930dd06328052ab606434b6244e9544adcbfcfa014e10f5bea80b1347325593af472fa98357f6d338b8499c3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/12, @ANYRES32, @ANYBLOB='\x00\x00', @ANYRES32=r0, @ANYBLOB="000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x400, 0xc8, 0x0, 0x2, 0x78, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000600)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\xa1h\xf52\xe4\xc7\xcc!\xe5\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xc5.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96p~\xde\xe0\xc9e\xa2\x96\xa8SW\xfb-3\xafM\xd7\x98\xbdN\x1d\xdc\xf98\xda\xe6\x04\xa0\xac\x1a\xa8\xa1\x12Q\xc0\xbb\xbe\xf1\xdd') r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x24040080) 759.048293ms ago: executing program 4 (id=11787): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000e50a00000000000073013600000000009500040000200000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{0x0}], 0x1}, 0x24004044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800eaffffff011a00000000000000e39400000000000010"], 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x29, 0x2, 0x0) 706.096378ms ago: executing program 1 (id=11788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000080)="d2df03c4ff4f84e5fbd9cb4608008cdd8af46937", 0x0, 0x95b2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) close(r6) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0xed, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f0000000300), &(0x7f00000003c0)=r6}, 0x20) 661.119022ms ago: executing program 4 (id=11789): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) getpid() r3 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0xf, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000280)=r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000e62c0000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0xffffff28}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89fb, &(0x7f0000000080)) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f2d00000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009080) 570.20828ms ago: executing program 1 (id=11790): r0 = syz_clone(0x10241000, &(0x7f00000000c0)="4e29d63467da3d789cb6a622cf980756f51b08fa997a86a6920419464bece379598f2c05268b83a8634395d4e2116a3581227b436612423056cad1d50246dbf5354228f9ad10ae5884601665f9a15e9bded666fdd7d7b2a68a1d7d255b713082fe83b2f5daf78597b214f770a43189580f91e1af1c33bbd114bb3c4deb9f24834690e29c30d5db23f5b510541d346da39c21070287", 0x95, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)='k9') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, r0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x9}]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a02413bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a99281000000059f425ec2f8580fe3c6f605f9a00e90ba71cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e0852c8e7536bd1f018fa6be1e4de61fdccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4065903124bff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae441e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719a"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1}]}, {0x0, [0x61]}}, &(0x7f00000014c0)=""/224, 0x27, 0xe0, 0x1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b1b4a5dddaebc53bb40000000000000061144cc9003b080000000000a600000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x9, &(0x7f00000000c0)=r4, 0x4) socket$kcm(0x25, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91224fc60100c214002000003050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 550.780652ms ago: executing program 2 (id=11792): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) 450.85604ms ago: executing program 4 (id=11793): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x823}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) unlink(&(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 391.224036ms ago: executing program 2 (id=11794): r0 = syz_clone(0x10241000, &(0x7f00000000c0)="4e29d63467da3d789cb6a622cf980756f51b08fa997a86a6920419464bece379598f2c05268b83a8634395d4e2116a3581227b436612423056cad1d50246dbf5354228f9ad10ae5884601665f9a15e9bded666fdd7d7b2a68a1d7d255b713082fe83b2f5daf78597b214f770a43189580f91e1af1c33bbd114bb3c4deb9f24834690e29c30d5db23f5b510541d346da39c21070287", 0x95, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)='k9') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, r0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x9}]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1}]}, {0x0, [0x61]}}, &(0x7f00000014c0)=""/224, 0x27, 0xe0, 0x1}, 0x28) 323.652992ms ago: executing program 1 (id=11795): r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x48, 0x3}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1000000e7aca990b459bb67272002ce60b02d25a806f8c", 0x78}], 0x1, 0x0, 0xcf}, 0x20000800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000440)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r3, &(0x7f0000000080), &(0x7f0000000100)=""/108}, 0x20) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/35, 0x23}, 0x0) r6 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r0, 0x0, 0x4, &(0x7f0000000180)='some'}, 0x30) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000cd0300000b00000000000000", @ANYRES32], 0x50) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRESHEX=r5], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8924, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x33fe0) 101.428261ms ago: executing program 5 (id=11796): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x7, 0x0, 0x10000005, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x3, @perf_config_ext={0xbd0b, 0x5}, 0x115e0, 0x0, 0x0, 0x3, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000d00)={0x3, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x4, 0x1, 0x0, 0x40, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x8726}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45", 0xc}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x28) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4d, 0x0, 0x42) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000100)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffea) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @local}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x14, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa00146400000071101b00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)}, 0x10) 9.582339ms ago: executing program 4 (id=11797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52"], 0xfdef) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x9, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1}, 0x50) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x99, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x5460, &(0x7f0000000000)=0xfffffffffffff2ff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0xd}, 0x106802, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r4, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[], 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) 8.614559ms ago: executing program 2 (id=11806): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x11a408, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x1000, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r2, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d4010000100000001800000000000000000000000000000035106fde75c3c71e"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x80) 0s ago: executing program 1 (id=11798): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x100001}]}, {0x0, [0x61]}}, &(0x7f0000000280)=""/222, 0x27, 0xde, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x1) socketpair(0x27, 0x5, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) write$cgroup_freezer_state(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') kernel console output (not intermixed with test programs): ns and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 899.910952][ T899] CPU: 0 PID: 899 Comm: syz.4.10710 Not tainted syzkaller #0 [ 899.918374][ T899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 899.928441][ T899] Call Trace: [ 899.930679][ T909] FAULT_INJECTION: forcing a failure. [ 899.930679][ T909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.931722][ T899] [ 899.931731][ T899] dump_stack_lvl+0x188/0x250 [ 899.952332][ T899] ? show_regs_print_info+0x20/0x20 [ 899.957549][ T899] ? load_image+0x400/0x400 [ 899.962071][ T899] ? __might_sleep+0xf0/0xf0 [ 899.966680][ T899] ? __lock_acquire+0x7d10/0x7d10 [ 899.971725][ T899] ? account_kernel_stack+0x1b1/0x390 [ 899.977170][ T899] should_fail+0x38c/0x4c0 [ 899.981663][ T899] should_failslab+0x5/0x20 [ 899.986270][ T899] slab_pre_alloc_hook+0x51/0xc0 [ 899.991316][ T899] ? prepare_creds+0x3c/0x610 [ 899.992117][ T908] validate_nla: 5 callbacks suppressed [ 899.994610][ T908] netlink: 'syz.0.10713': attribute type 10 has an invalid length. [ 899.996011][ T899] kmem_cache_alloc+0x3d/0x290 [ 899.996042][ T899] prepare_creds+0x3c/0x610 [ 899.996063][ T899] copy_creds+0x146/0xd00 [ 899.996088][ T899] copy_process+0x8a8/0x3e20 [ 899.996131][ T899] ? __pidfd_prepare+0x140/0x140 [ 900.032725][ T899] kernel_clone+0x23f/0x990 [ 900.037252][ T899] ? __lock_acquire+0x7d10/0x7d10 [ 900.042386][ T899] ? vfs_write+0x8b2/0xd60 [ 900.046901][ T899] ? create_io_thread+0x180/0x180 [ 900.051960][ T899] __x64_sys_clone+0x19a/0x210 [ 900.056743][ T899] ? __ia32_sys_vfork+0x130/0x130 [ 900.061810][ T899] ? lockdep_hardirqs_on+0x94/0x140 [ 900.067030][ T899] do_syscall_64+0x4c/0xa0 [ 900.071555][ T899] ? clear_bhb_loop+0x30/0x80 [ 900.076239][ T899] ? clear_bhb_loop+0x30/0x80 [ 900.080933][ T899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 900.084716][ T908] netlink: 'syz.0.10713': attribute type 13 has an invalid length. [ 900.086941][ T899] RIP: 0033:0x7f694ed9d629 [ 900.086965][ T899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.086979][ T899] RSP: 002b:00007f694cff6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 900.087000][ T899] RAX: ffffffffffffffda RBX: 00007f694f016fa0 RCX: 00007f694ed9d629 [ 900.087013][ T899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000005000000 [ 900.087024][ T899] RBP: 00007f694cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 900.087036][ T899] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 900.087046][ T899] R13: 00007f694f017038 R14: 00007f694f016fa0 R15: 00007fff540ac2e8 [ 900.087073][ T899] [ 900.170284][ T909] CPU: 0 PID: 909 Comm: syz.2.10711 Not tainted syzkaller #0 [ 900.180568][ T909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 900.190640][ T909] Call Trace: [ 900.193936][ T909] [ 900.196881][ T909] dump_stack_lvl+0x188/0x250 [ 900.201595][ T909] ? show_regs_print_info+0x20/0x20 [ 900.206826][ T909] ? load_image+0x400/0x400 [ 900.211349][ T909] ? __lock_acquire+0x7d10/0x7d10 [ 900.216400][ T909] should_fail+0x38c/0x4c0 [ 900.220841][ T909] _copy_from_user+0x2e/0x170 [ 900.224902][ T908] netlink: 160 bytes leftover after parsing attributes in process `syz.0.10713'. [ 900.225535][ T909] ___sys_recvmsg+0x173/0x5c0 [ 900.225567][ T909] ? __sys_recvmsg+0x280/0x280 [ 900.225592][ T909] ? __lock_acquire+0x7d10/0x7d10 [ 900.225632][ T909] __x64_sys_recvmsg+0x1f9/0x2c0 [ 900.254068][ T909] ? ___sys_recvmsg+0x5c0/0x5c0 [ 900.258943][ T909] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 900.264949][ T909] ? lockdep_hardirqs_on+0x94/0x140 [ 900.270271][ T909] do_syscall_64+0x4c/0xa0 [ 900.274695][ T909] ? clear_bhb_loop+0x30/0x80 [ 900.279376][ T909] ? clear_bhb_loop+0x30/0x80 [ 900.284054][ T909] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 900.289940][ T909] RIP: 0033:0x7f49df5e1629 [ 900.294361][ T909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.313972][ T909] RSP: 002b:00007f49dd81a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 900.322379][ T909] RAX: ffffffffffffffda RBX: 00007f49df85b090 RCX: 00007f49df5e1629 [ 900.330335][ T909] RDX: 0000000000010040 RSI: 0000200000000340 RDI: 0000000000000003 [ 900.338289][ T909] RBP: 00007f49dd81a090 R08: 0000000000000000 R09: 0000000000000000 [ 900.346249][ T909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.354214][ T909] R13: 00007f49df85b128 R14: 00007f49df85b090 R15: 00007ffe001d3b48 [ 900.362184][ T909] [ 900.446424][ T908] erspan0: refused to change device tx_queue_len [ 900.464825][ T908] net_ratelimit: 69 callbacks suppressed [ 900.464858][ T908] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 901.210442][ T935] netlink: 'syz.0.10725': attribute type 10 has an invalid length. [ 901.219479][ T935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10725'. [ 901.267836][ T935] bridge0: port 3(veth0_vlan) entered blocking state [ 901.293209][ T935] bridge0: port 3(veth0_vlan) entered disabled state [ 901.357422][ T935] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 901.407168][ T942] FAULT_INJECTION: forcing a failure. [ 901.407168][ T942] name failslab, interval 1, probability 0, space 0, times 0 [ 901.440565][ T942] CPU: 0 PID: 942 Comm: syz.4.10728 Not tainted syzkaller #0 [ 901.447984][ T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.458048][ T942] Call Trace: [ 901.461364][ T942] [ 901.464303][ T942] dump_stack_lvl+0x188/0x250 [ 901.468998][ T942] ? show_regs_print_info+0x20/0x20 [ 901.474201][ T942] ? load_image+0x400/0x400 [ 901.478708][ T942] ? __lock_acquire+0x7d10/0x7d10 [ 901.483831][ T942] should_fail+0x38c/0x4c0 [ 901.488270][ T942] should_failslab+0x5/0x20 [ 901.492776][ T942] slab_pre_alloc_hook+0x51/0xc0 [ 901.497905][ T942] __kmalloc+0x6b/0x330 [ 901.502084][ T942] ? sk_prot_alloc+0xe7/0x210 [ 901.506774][ T942] sk_prot_alloc+0xe7/0x210 [ 901.511364][ T942] ? sk_alloc+0x1d/0x310 [ 901.515613][ T942] sk_alloc+0x2f/0x310 [ 901.519686][ T942] bpf_prog_test_run_skb+0x240/0x1180 [ 901.525064][ T942] ? __fget_files+0x40f/0x480 [ 901.529756][ T942] ? cpu_online+0x60/0x60 [ 901.534088][ T942] bpf_prog_test_run+0x31e/0x390 [ 901.539037][ T942] __sys_bpf+0x5a5/0x6f0 [ 901.543285][ T942] ? bpf_link_show_fdinfo+0x380/0x380 [ 901.548672][ T942] ? vtime_user_exit+0x2c8/0x3e0 [ 901.553625][ T942] __x64_sys_bpf+0x78/0x90 [ 901.558061][ T942] do_syscall_64+0x4c/0xa0 [ 901.562495][ T942] ? clear_bhb_loop+0x30/0x80 [ 901.567177][ T942] ? clear_bhb_loop+0x30/0x80 [ 901.571859][ T942] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 901.577758][ T942] RIP: 0033:0x7f694ed9d629 [ 901.582180][ T942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.601791][ T942] RSP: 002b:00007f694cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 901.610313][ T942] RAX: ffffffffffffffda RBX: 00007f694f016fa0 RCX: 00007f694ed9d629 [ 901.618298][ T942] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 901.619451][ T940] netlink: 'syz.5.10726': attribute type 10 has an invalid length. [ 901.626284][ T942] RBP: 00007f694cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 901.626305][ T942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.626315][ T942] R13: 00007f694f017038 R14: 00007f694f016fa0 R15: 00007fff540ac2e8 [ 901.626341][ T942] [ 901.776483][ T940] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10726'. [ 901.815560][ T940] bridge0: port 3(veth0_vlan) entered blocking state [ 901.838354][ T940] bridge0: port 3(veth0_vlan) entered disabled state [ 901.901431][ T940] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 902.658427][ T977] netlink: 'syz.1.10742': attribute type 10 has an invalid length. [ 902.736928][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 902.758456][ T977] netlink: 'syz.1.10742': attribute type 13 has an invalid length. [ 902.793977][ T977] netlink: 160 bytes leftover after parsing attributes in process `syz.1.10742'. [ 902.846306][ T977] erspan0: refused to change device tx_queue_len [ 902.853919][ T977] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 903.044532][ T991] netlink: 'syz.0.10747': attribute type 9 has an invalid length. [ 903.059571][ T991] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.10747'. [ 903.474958][ T1004] netlink: 'syz.4.10753': attribute type 10 has an invalid length. [ 903.521478][ T1004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10753'. [ 903.605965][ T1004] bridge0: port 3(veth0_vlan) entered blocking state [ 903.615418][ T1004] bridge0: port 3(veth0_vlan) entered disabled state [ 903.636912][ T1004] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 903.786446][ T1020] FAULT_INJECTION: forcing a failure. [ 903.786446][ T1020] name failslab, interval 1, probability 0, space 0, times 0 [ 903.859157][ T1020] CPU: 1 PID: 1020 Comm: syz.5.10759 Not tainted syzkaller #0 [ 903.866654][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.876723][ T1020] Call Trace: [ 903.880003][ T1020] [ 903.883023][ T1020] dump_stack_lvl+0x188/0x250 [ 903.887715][ T1020] ? show_regs_print_info+0x20/0x20 [ 903.892912][ T1020] ? load_image+0x400/0x400 [ 903.897425][ T1020] ? __might_sleep+0xf0/0xf0 [ 903.902028][ T1020] ? __lock_acquire+0x7d10/0x7d10 [ 903.907065][ T1020] should_fail+0x38c/0x4c0 [ 903.911494][ T1020] should_failslab+0x5/0x20 [ 903.916004][ T1020] slab_pre_alloc_hook+0x51/0xc0 [ 903.920955][ T1020] __kmalloc_node+0x6e/0x3b0 [ 903.925551][ T1020] ? kvmalloc_node+0x84/0x130 [ 903.930230][ T1020] kvmalloc_node+0x84/0x130 [ 903.934735][ T1020] fanout_add+0x6c4/0x11b0 [ 903.939158][ T1020] ? _copy_from_user+0x111/0x170 [ 903.944090][ T1020] packet_setsockopt+0xbf4/0x1af0 [ 903.949103][ T1020] ? __might_sleep+0xf0/0xf0 [ 903.953677][ T1020] ? packet_ioctl+0x240/0x240 [ 903.958339][ T1020] ? rcu_lock_release+0x9/0x20 [ 903.963103][ T1020] ? __lock_acquire+0x7d10/0x7d10 [ 903.968125][ T1020] ? aa_sk_perm+0x7dc/0x910 [ 903.972812][ T1020] ? aa_af_perm+0x340/0x340 [ 903.977317][ T1020] ? __fget_files+0x40f/0x480 [ 903.981999][ T1020] ? aa_sock_opt_perm+0x74/0x100 [ 903.986932][ T1020] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 903.992734][ T1020] ? security_socket_setsockopt+0x7a/0xa0 [ 903.998433][ T1020] ? packet_ioctl+0x240/0x240 [ 904.003095][ T1020] __sys_setsockopt+0x2bf/0x3d0 [ 904.007965][ T1020] __x64_sys_setsockopt+0xb1/0xc0 [ 904.012973][ T1020] do_syscall_64+0x4c/0xa0 [ 904.017370][ T1020] ? clear_bhb_loop+0x30/0x80 [ 904.022027][ T1020] ? clear_bhb_loop+0x30/0x80 [ 904.026686][ T1020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 904.032562][ T1020] RIP: 0033:0x7fbedf10b629 [ 904.036962][ T1020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.056549][ T1020] RSP: 002b:00007fbedd365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 904.064948][ T1020] RAX: ffffffffffffffda RBX: 00007fbedf384fa0 RCX: 00007fbedf10b629 [ 904.072909][ T1020] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 904.080862][ T1020] RBP: 00007fbedd365090 R08: 0000000000000004 R09: 0000000000000000 [ 904.088817][ T1020] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 904.096781][ T1020] R13: 00007fbedf385038 R14: 00007fbedf384fa0 R15: 00007ffd68ec8038 [ 904.104764][ T1020] [ 904.771817][ T1055] netlink: 'syz.1.10772': attribute type 4 has an invalid length. [ 904.822992][ T1055] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10772'. [ 904.878004][ T1062] FAULT_INJECTION: forcing a failure. [ 904.878004][ T1062] name failslab, interval 1, probability 0, space 0, times 0 [ 904.882722][ T1065] syz_tun: refused to change device tx_queue_len [ 904.946592][ T1062] CPU: 1 PID: 1062 Comm: syz.4.10775 Not tainted syzkaller #0 [ 904.954201][ T1062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.964269][ T1062] Call Trace: [ 904.967558][ T1062] [ 904.970489][ T1062] dump_stack_lvl+0x188/0x250 [ 904.975193][ T1062] ? show_regs_print_info+0x20/0x20 [ 904.980379][ T1062] ? load_image+0x400/0x400 [ 904.984881][ T1062] ? __might_sleep+0xf0/0xf0 [ 904.989470][ T1062] ? __lock_acquire+0x7d10/0x7d10 [ 904.994483][ T1062] ? mark_lock+0x94/0x320 [ 904.998973][ T1062] should_fail+0x38c/0x4c0 [ 905.003382][ T1062] should_failslab+0x5/0x20 [ 905.007871][ T1062] slab_pre_alloc_hook+0x51/0xc0 [ 905.012798][ T1062] __kmalloc+0x6b/0x330 [ 905.016937][ T1062] ? tomoyo_realpath_from_path+0x118/0x610 [ 905.022735][ T1062] tomoyo_realpath_from_path+0x118/0x610 [ 905.028364][ T1062] tomoyo_path_number_perm+0x242/0x660 [ 905.033809][ T1062] ? verify_lock_unused+0x140/0x140 [ 905.038999][ T1062] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 905.044444][ T1062] ? ksys_write+0x1c6/0x260 [ 905.048965][ T1062] security_file_ioctl+0x6c/0xa0 [ 905.053892][ T1062] __se_sys_ioctl+0x48/0x170 [ 905.058485][ T1062] do_syscall_64+0x4c/0xa0 [ 905.062897][ T1062] ? clear_bhb_loop+0x30/0x80 [ 905.067564][ T1062] ? clear_bhb_loop+0x30/0x80 [ 905.072234][ T1062] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 905.078134][ T1062] RIP: 0033:0x7f694ed9d629 [ 905.082540][ T1062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.102128][ T1062] RSP: 002b:00007f694cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 905.110532][ T1062] RAX: ffffffffffffffda RBX: 00007f694f016fa0 RCX: 00007f694ed9d629 [ 905.118486][ T1062] RDX: 0000200000000000 RSI: 0000000000008b1a RDI: 0000000000000006 [ 905.126439][ T1062] RBP: 00007f694cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 905.134399][ T1062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.142371][ T1062] R13: 00007f694f017038 R14: 00007f694f016fa0 R15: 00007fff540ac2e8 [ 905.150377][ T1062] [ 905.154960][ T1073] netlink: 'syz.5.10774': attribute type 10 has an invalid length. [ 905.169588][ T1062] ERROR: Out of memory at tomoyo_realpath_from_path. [ 905.182574][ T1055] netlink: 'syz.1.10772': attribute type 10 has an invalid length. [ 905.200917][ T1055] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10772'. [ 905.214002][ T1062] mac80211_hwsim hwsim62 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 905.236282][ T1073] netlink: 'syz.5.10774': attribute type 13 has an invalid length. [ 905.245328][ T1073] netlink: 160 bytes leftover after parsing attributes in process `syz.5.10774'. [ 905.255678][ T1073] erspan0: refused to change device tx_queue_len [ 905.264558][ T1073] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 905.736162][ T1093] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10783'. [ 906.193407][ T1105] netlink: 'syz.2.10787': attribute type 10 has an invalid length. [ 906.222902][ T1105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10787'. [ 906.263241][ T1105] bridge0: port 3(veth0_vlan) entered blocking state [ 906.293019][ T1105] bridge0: port 3(veth0_vlan) entered disabled state [ 906.395852][ T1105] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 906.940922][ T1131] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.10799'. [ 907.040393][ T1131] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 907.694301][ T1152] wlan1: Trigger new scan to find an IBSS to join [ 909.221883][ T1172] netlink: 'syz.5.10812': attribute type 16 has an invalid length. [ 909.269712][ T1172] netlink: 168 bytes leftover after parsing attributes in process `syz.5.10812'. [ 909.408641][ T1196] FAULT_INJECTION: forcing a failure. [ 909.408641][ T1196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 909.423616][ T1196] CPU: 0 PID: 1196 Comm: syz.1.10817 Not tainted syzkaller #0 [ 909.431097][ T1196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.441154][ T1196] Call Trace: [ 909.444425][ T1196] [ 909.447349][ T1196] dump_stack_lvl+0x188/0x250 [ 909.452022][ T1196] ? show_regs_print_info+0x20/0x20 [ 909.457216][ T1196] ? load_image+0x400/0x400 [ 909.461812][ T1196] should_fail+0x38c/0x4c0 [ 909.466228][ T1196] _copy_to_user+0x2e/0x130 [ 909.470728][ T1196] simple_read_from_buffer+0xe3/0x150 [ 909.476098][ T1196] proc_fail_nth_read+0x1a6/0x220 [ 909.481109][ T1196] ? proc_fault_inject_write+0x310/0x310 [ 909.486758][ T1196] ? fsnotify_perm+0x254/0x560 [ 909.491512][ T1196] ? proc_fault_inject_write+0x310/0x310 [ 909.497243][ T1196] vfs_read+0x301/0xd60 [ 909.501407][ T1196] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 909.507557][ T1196] ? kernel_read+0x1e0/0x1e0 [ 909.512149][ T1196] ? __fdget_pos+0x24b/0x370 [ 909.516763][ T1196] ? mutex_lock_nested+0x17/0x20 [ 909.521691][ T1196] ? __fdget_pos+0x2bf/0x370 [ 909.526279][ T1196] ? ksys_read+0x71/0x260 [ 909.530599][ T1196] ksys_read+0x152/0x260 [ 909.534840][ T1196] ? vfs_write+0xd60/0xd60 [ 909.539257][ T1196] ? syscall_enter_from_user_mode+0x2a/0x70 [ 909.545160][ T1196] do_syscall_64+0x4c/0xa0 [ 909.549566][ T1196] ? clear_bhb_loop+0x30/0x80 [ 909.554236][ T1196] ? clear_bhb_loop+0x30/0x80 [ 909.558900][ T1196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 909.564778][ T1196] RIP: 0033:0x7f07292ccece [ 909.569184][ T1196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 909.588778][ T1196] RSP: 002b:00007f0727565fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 909.597196][ T1196] RAX: ffffffffffffffda RBX: 00007f07275666c0 RCX: 00007f07292ccece [ 909.605167][ T1196] RDX: 000000000000000f RSI: 00007f07275660a0 RDI: 0000000000000006 [ 909.613125][ T1196] RBP: 00007f0727566090 R08: 0000000000000000 R09: 0000000000000000 [ 909.621082][ T1196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.629039][ T1196] R13: 00007f0729586038 R14: 00007f0729585fa0 R15: 00007ffdb63ef658 [ 909.637009][ T1196] [ 909.961554][ T1213] device wlan0 entered promiscuous mode [ 909.992015][ T1217] FAULT_INJECTION: forcing a failure. [ 909.992015][ T1217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.056763][ T1217] CPU: 1 PID: 1217 Comm: syz.4.10826 Not tainted syzkaller #0 [ 910.064267][ T1217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.074337][ T1217] Call Trace: [ 910.077625][ T1217] [ 910.080561][ T1217] dump_stack_lvl+0x188/0x250 [ 910.085474][ T1217] ? show_regs_print_info+0x20/0x20 [ 910.090780][ T1217] ? load_image+0x400/0x400 [ 910.095369][ T1217] ? __lock_acquire+0x7d10/0x7d10 [ 910.100511][ T1217] ? bpf_test_run+0x78e/0x800 [ 910.105211][ T1217] should_fail+0x38c/0x4c0 [ 910.109653][ T1217] _copy_to_user+0x2e/0x130 [ 910.114180][ T1217] bpf_test_finish+0x1b7/0x2f0 [ 910.118970][ T1217] ? convert_skb_to___skb+0x360/0x360 [ 910.124436][ T1217] ? _copy_from_user+0x111/0x170 [ 910.129395][ T1217] ? bpf_test_init+0x171/0x1b0 [ 910.134181][ T1217] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 910.139784][ T1217] bpf_prog_test_run_xdp+0x62b/0x920 [ 910.145093][ T1217] ? dev_put+0x70/0x70 [ 910.149164][ T1217] ? dev_put+0x70/0x70 [ 910.153225][ T1217] bpf_prog_test_run+0x31e/0x390 [ 910.158159][ T1217] __sys_bpf+0x5a5/0x6f0 [ 910.162404][ T1217] ? bpf_link_show_fdinfo+0x380/0x380 [ 910.167781][ T1217] ? rcu_nmi_exit+0x6f/0xf0 [ 910.172306][ T1217] ? vtime_user_exit+0x2c8/0x3e0 [ 910.177251][ T1217] __x64_sys_bpf+0x78/0x90 [ 910.181669][ T1217] do_syscall_64+0x4c/0xa0 [ 910.186072][ T1217] ? clear_bhb_loop+0x30/0x80 [ 910.190820][ T1217] ? clear_bhb_loop+0x30/0x80 [ 910.195504][ T1217] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 910.201390][ T1217] RIP: 0033:0x7f694ed9d629 [ 910.205820][ T1217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.225420][ T1217] RSP: 002b:00007f694cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 910.233824][ T1217] RAX: ffffffffffffffda RBX: 00007f694f016fa0 RCX: 00007f694ed9d629 [ 910.241807][ T1217] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 910.249764][ T1217] RBP: 00007f694cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 910.257720][ T1217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.265681][ T1217] R13: 00007f694f017038 R14: 00007f694f016fa0 R15: 00007fff540ac2e8 [ 910.273678][ T1217] [ 910.387415][ T1229] FAULT_INJECTION: forcing a failure. [ 910.387415][ T1229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.408106][ T1229] CPU: 1 PID: 1229 Comm: syz.1.10829 Not tainted syzkaller #0 [ 910.415649][ T1229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 910.425719][ T1229] Call Trace: [ 910.429013][ T1229] [ 910.431960][ T1229] dump_stack_lvl+0x188/0x250 [ 910.436657][ T1229] ? show_regs_print_info+0x20/0x20 [ 910.441861][ T1229] ? load_image+0x400/0x400 [ 910.446372][ T1229] ? __lock_acquire+0x7d10/0x7d10 [ 910.451424][ T1229] should_fail+0x38c/0x4c0 [ 910.455959][ T1229] _copy_from_user+0x2e/0x170 [ 910.460652][ T1229] __copy_msghdr_from_user+0x48a/0x630 [ 910.466491][ T1229] ? verify_lock_unused+0x140/0x140 [ 910.471801][ T1229] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 910.477113][ T1229] ___sys_sendmsg+0x19a/0x2e0 [ 910.481804][ T1229] ? __sys_sendmsg+0x2a0/0x2a0 [ 910.486593][ T1229] __se_sys_sendmsg+0x1af/0x290 [ 910.491443][ T1229] ? __x64_sys_sendmsg+0x80/0x80 [ 910.496374][ T1229] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 910.502383][ T1229] ? lockdep_hardirqs_on+0x94/0x140 [ 910.507608][ T1229] do_syscall_64+0x4c/0xa0 [ 910.512037][ T1229] ? clear_bhb_loop+0x30/0x80 [ 910.516704][ T1229] ? clear_bhb_loop+0x30/0x80 [ 910.521422][ T1229] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 910.527322][ T1229] RIP: 0033:0x7f072930c629 [ 910.531733][ T1229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.551329][ T1229] RSP: 002b:00007f0727566028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.559742][ T1229] RAX: ffffffffffffffda RBX: 00007f0729585fa0 RCX: 00007f072930c629 [ 910.567794][ T1229] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 910.575757][ T1229] RBP: 00007f0727566090 R08: 0000000000000000 R09: 0000000000000000 [ 910.583725][ T1229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.591785][ T1229] R13: 00007f0729586038 R14: 00007f0729585fa0 R15: 00007ffdb63ef658 [ 910.599774][ T1229] [ 910.735854][ T4224] wlan1: Trigger new scan to find an IBSS to join [ 911.164728][ T1245] netlink: 'syz.1.10836': attribute type 16 has an invalid length. [ 911.192649][ T1245] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10836'. [ 911.247230][ T1257] netlink: 'syz.2.10840': attribute type 10 has an invalid length. [ 911.301425][ T1257] netlink: 'syz.2.10840': attribute type 13 has an invalid length. [ 911.320384][ T1257] netlink: 160 bytes leftover after parsing attributes in process `syz.2.10840'. [ 911.343065][ T1257] erspan0: refused to change device tx_queue_len [ 911.376687][ T1257] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 911.491566][ T1259] device wlan0 entered promiscuous mode [ 912.597496][ T1307] netlink: 'syz.0.10860': attribute type 4 has an invalid length. [ 912.652632][ T1307] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10860'. [ 912.664241][ T1309] netlink: 'syz.2.10861': attribute type 4 has an invalid length. [ 912.674041][ T1309] netlink: 168 bytes leftover after parsing attributes in process `syz.2.10861'. [ 912.719580][ T1307] netlink: 'syz.0.10860': attribute type 10 has an invalid length. [ 912.769551][ T1307] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10860'. [ 912.799691][ T1307] device batadv_slave_1 entered promiscuous mode [ 912.807066][ T1307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 912.815723][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.876971][ T1318] netlink: 'syz.2.10861': attribute type 10 has an invalid length. [ 912.922434][ T1318] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10861'. [ 912.962375][ T1318] device batadv_slave_1 entered promiscuous mode [ 912.973895][ T4330] Bluetooth: hci6: command 0x0406 tx timeout [ 912.990901][ T1318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.048427][ T1318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.160376][ T1330] FAULT_INJECTION: forcing a failure. [ 913.160376][ T1330] name failslab, interval 1, probability 0, space 0, times 0 [ 913.242688][ T1330] CPU: 0 PID: 1330 Comm: syz.1.10869 Not tainted syzkaller #0 [ 913.250202][ T1330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.260277][ T1330] Call Trace: [ 913.263570][ T1330] [ 913.266510][ T1330] dump_stack_lvl+0x188/0x250 [ 913.271296][ T1330] ? show_regs_print_info+0x20/0x20 [ 913.276561][ T1330] ? load_image+0x400/0x400 [ 913.281133][ T1330] ? __might_sleep+0xf0/0xf0 [ 913.285739][ T1330] ? __lock_acquire+0x7d10/0x7d10 [ 913.290789][ T1330] should_fail+0x38c/0x4c0 [ 913.295208][ T1330] should_failslab+0x5/0x20 [ 913.299701][ T1330] slab_pre_alloc_hook+0x51/0xc0 [ 913.304627][ T1330] __kmalloc_node_track_caller+0x68/0x3a0 [ 913.310332][ T1330] ? netlink_sendmsg+0x654/0xbe0 [ 913.315251][ T1330] ? kmem_cache_alloc_node+0x162/0x2d0 [ 913.320724][ T1330] ? __alloc_skb+0xf4/0x750 [ 913.325303][ T1330] ? netlink_sendmsg+0x654/0xbe0 [ 913.330226][ T1330] __alloc_skb+0x22c/0x750 [ 913.334642][ T1330] netlink_sendmsg+0x654/0xbe0 [ 913.339411][ T1330] ? netlink_getsockopt+0x570/0x570 [ 913.344604][ T1330] ? aa_sock_msg_perm+0x94/0x150 [ 913.349538][ T1330] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 913.354809][ T1330] ? security_socket_sendmsg+0x7c/0xa0 [ 913.360276][ T1330] ? netlink_getsockopt+0x570/0x570 [ 913.365458][ T1330] ____sys_sendmsg+0x5b7/0x8f0 [ 913.370219][ T1330] ? __sys_sendmsg_sock+0x30/0x30 [ 913.375238][ T1330] ? import_iovec+0x6f/0xa0 [ 913.379729][ T1330] ___sys_sendmsg+0x236/0x2e0 [ 913.384398][ T1330] ? __sys_sendmsg+0x2a0/0x2a0 [ 913.389181][ T1330] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 913.395788][ T1330] __se_sys_sendmsg+0x1af/0x290 [ 913.400680][ T1330] ? __x64_sys_sendmsg+0x80/0x80 [ 913.405813][ T1330] ? syscall_enter_from_user_mode+0x2a/0x70 [ 913.411721][ T1330] do_syscall_64+0x4c/0xa0 [ 913.416154][ T1330] ? clear_bhb_loop+0x30/0x80 [ 913.420817][ T1330] ? clear_bhb_loop+0x30/0x80 [ 913.425478][ T1330] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 913.431532][ T1330] RIP: 0033:0x7f072930c629 [ 913.436110][ T1330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.455707][ T1330] RSP: 002b:00007f0727566028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.464115][ T1330] RAX: ffffffffffffffda RBX: 00007f0729585fa0 RCX: 00007f072930c629 [ 913.472094][ T1330] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 913.480103][ T1330] RBP: 00007f0727566090 R08: 0000000000000000 R09: 0000000000000000 [ 913.488062][ T1330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.496216][ T1330] R13: 00007f0729586038 R14: 00007f0729585fa0 R15: 00007ffdb63ef658 [ 913.504187][ T1330] [ 913.583009][ T1340] FAULT_INJECTION: forcing a failure. [ 913.583009][ T1340] name failslab, interval 1, probability 0, space 0, times 0 [ 913.618123][ T1340] CPU: 1 PID: 1340 Comm: syz.4.10872 Not tainted syzkaller #0 [ 913.625626][ T1340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 913.635683][ T1340] Call Trace: [ 913.638961][ T1340] [ 913.641884][ T1340] dump_stack_lvl+0x188/0x250 [ 913.646556][ T1340] ? show_regs_print_info+0x20/0x20 [ 913.651787][ T1340] ? load_image+0x400/0x400 [ 913.656277][ T1340] ? __might_sleep+0xf0/0xf0 [ 913.660857][ T1340] ? __lock_acquire+0x7d10/0x7d10 [ 913.665868][ T1340] should_fail+0x38c/0x4c0 [ 913.670272][ T1340] should_failslab+0x5/0x20 [ 913.674770][ T1340] slab_pre_alloc_hook+0x51/0xc0 [ 913.679714][ T1340] __kmalloc_node_track_caller+0x68/0x3a0 [ 913.685470][ T1340] ? netlink_sendmsg+0x654/0xbe0 [ 913.690434][ T1340] ? kmem_cache_alloc_node+0x162/0x2d0 [ 913.695878][ T1340] ? __alloc_skb+0xf4/0x750 [ 913.700367][ T1340] ? netlink_sendmsg+0x654/0xbe0 [ 913.705290][ T1340] __alloc_skb+0x22c/0x750 [ 913.709707][ T1340] netlink_sendmsg+0x654/0xbe0 [ 913.714478][ T1340] ? netlink_getsockopt+0x570/0x570 [ 913.719692][ T1340] ? aa_sock_msg_perm+0x94/0x150 [ 913.724624][ T1340] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 913.729898][ T1340] ? security_socket_sendmsg+0x7c/0xa0 [ 913.735345][ T1340] ? netlink_getsockopt+0x570/0x570 [ 913.740618][ T1340] ____sys_sendmsg+0x5b7/0x8f0 [ 913.745380][ T1340] ? __sys_sendmsg_sock+0x30/0x30 [ 913.750422][ T1340] ? import_iovec+0x6f/0xa0 [ 913.755007][ T1340] ___sys_sendmsg+0x236/0x2e0 [ 913.759687][ T1340] ? __sys_sendmsg+0x2a0/0x2a0 [ 913.764443][ T1340] ? vfs_write+0x8b2/0xd60 [ 913.768856][ T1340] __se_sys_sendmsg+0x1af/0x290 [ 913.773882][ T1340] ? __x64_sys_sendmsg+0x80/0x80 [ 913.778909][ T1340] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 913.784897][ T1340] ? lockdep_hardirqs_on+0x94/0x140 [ 913.790091][ T1340] do_syscall_64+0x4c/0xa0 [ 913.794490][ T1340] ? clear_bhb_loop+0x30/0x80 [ 913.799148][ T1340] ? clear_bhb_loop+0x30/0x80 [ 913.803855][ T1340] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 913.809749][ T1340] RIP: 0033:0x7f694ed9d629 [ 913.814167][ T1340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.833847][ T1340] RSP: 002b:00007f694cff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.842253][ T1340] RAX: ffffffffffffffda RBX: 00007f694f016fa0 RCX: 00007f694ed9d629 [ 913.850214][ T1340] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 913.858173][ T1340] RBP: 00007f694cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 913.866130][ T1340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.874094][ T1340] R13: 00007f694f017038 R14: 00007f694f016fa0 R15: 00007fff540ac2e8 [ 913.882089][ T1340] [ 913.890349][T21464] wlan1: Trigger new scan to find an IBSS to join [ 914.310379][ T1362] FAULT_INJECTION: forcing a failure. [ 914.310379][ T1362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.428481][ T1362] CPU: 1 PID: 1362 Comm: syz.5.10881 Not tainted syzkaller #0 [ 914.435985][ T1362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 914.446061][ T1362] Call Trace: [ 914.449349][ T1362] [ 914.452280][ T1362] dump_stack_lvl+0x188/0x250 [ 914.456962][ T1362] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 914.463129][ T1362] ? show_regs_print_info+0x20/0x20 [ 914.468340][ T1362] ? load_image+0x400/0x400 [ 914.472866][ T1362] should_fail+0x38c/0x4c0 [ 914.477294][ T1362] _copy_to_user+0x2e/0x130 [ 914.482329][ T1362] simple_read_from_buffer+0xe3/0x150 [ 914.487711][ T1362] proc_fail_nth_read+0x1a6/0x220 [ 914.492743][ T1362] ? proc_fault_inject_write+0x310/0x310 [ 914.498390][ T1362] ? fsnotify_perm+0x254/0x560 [ 914.503162][ T1362] ? proc_fault_inject_write+0x310/0x310 [ 914.508806][ T1362] vfs_read+0x301/0xd60 [ 914.512974][ T1362] ? kernel_read+0x1e0/0x1e0 [ 914.517567][ T1362] ? rcu_nmi_exit+0x6f/0xf0 [ 914.522079][ T1362] ? __fget_files+0x40f/0x480 [ 914.526769][ T1362] ? mutex_lock_nested+0x17/0x20 [ 914.531716][ T1362] ? __fdget_pos+0x2bf/0x370 [ 914.536301][ T1362] ? ksys_read+0x71/0x260 [ 914.540633][ T1362] ksys_read+0x152/0x260 [ 914.544876][ T1362] ? vfs_write+0xd60/0xd60 [ 914.549297][ T1362] ? syscall_enter_from_user_mode+0x2a/0x70 [ 914.555193][ T1362] do_syscall_64+0x4c/0xa0 [ 914.559604][ T1362] ? clear_bhb_loop+0x30/0x80 [ 914.564275][ T1362] ? clear_bhb_loop+0x30/0x80 [ 914.568960][ T1362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 914.574847][ T1362] RIP: 0033:0x7fbedf0cbece [ 914.579264][ T1362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 914.598871][ T1362] RSP: 002b:00007fbedd364fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.607310][ T1362] RAX: ffffffffffffffda RBX: 00007fbedd3656c0 RCX: 00007fbedf0cbece [ 914.615287][ T1362] RDX: 000000000000000f RSI: 00007fbedd3650a0 RDI: 0000000000000005 [ 914.623353][ T1362] RBP: 00007fbedd365090 R08: 0000000000000000 R09: 0000000000000000 [ 914.631336][ T1362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.639305][ T1362] R13: 00007fbedf385038 R14: 00007fbedf384fa0 R15: 00007ffd68ec8038 [ 914.647305][ T1362] [ 914.674760][ T1368] netlink: 'syz.4.10877': attribute type 16 has an invalid length. [ 914.703575][ T1368] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10877'. [ 914.813238][ T1374] netlink: 'syz.1.10886': attribute type 4 has an invalid length. [ 914.868235][ T1374] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10886'. [ 914.955802][ T1380] netlink: 'syz.1.10886': attribute type 10 has an invalid length. [ 915.017866][ T1380] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10886'. [ 915.034925][T21464] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 915.931059][ T1388] netlink: 160 bytes leftover after parsing attributes in process `syz.1.10892'. [ 915.987830][ T1388] erspan0: refused to change device tx_queue_len [ 916.007877][ T1388] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 916.186035][ T1399] validate_nla: 2 callbacks suppressed [ 916.186068][ T1399] netlink: 'syz.5.10896': attribute type 10 has an invalid length. [ 916.291174][ T1407] netlink: 'syz.5.10896': attribute type 13 has an invalid length. [ 916.335201][ T1407] netlink: 160 bytes leftover after parsing attributes in process `syz.5.10896'. [ 916.356830][ T1407] erspan0: refused to change device tx_queue_len [ 916.365693][ T1407] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 916.411642][ T1415] netlink: 'syz.4.10902': attribute type 4 has an invalid length. [ 916.445778][ T1415] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10902'. [ 916.511319][ T1420] netlink: 'syz.1.10904': attribute type 4 has an invalid length. [ 916.529900][ T1420] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10904'. [ 916.550456][ T1415] netlink: 'syz.4.10902': attribute type 10 has an invalid length. [ 916.591913][ T1415] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10902'. [ 916.611159][ T1420] netlink: 'syz.1.10904': attribute type 10 has an invalid length. [ 916.620942][ T1420] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10904'. [ 917.796825][ T1448] netlink: 'syz.1.10913': attribute type 1 has an invalid length. [ 917.874021][ T1448] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.10913'. [ 918.005880][ T1440] netlink: 'syz.5.10911': attribute type 10 has an invalid length. [ 918.021842][ T1440] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10911'. [ 918.048092][ T1440] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 918.074296][ T1440] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.103249][ T1440] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 918.111468][ T1460] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10916'. [ 918.138462][ T1459] netlink: 830 bytes leftover after parsing attributes in process `syz.4.10916'. [ 918.365425][ T1476] netlink: 'syz.4.10923': attribute type 4 has an invalid length. [ 918.373562][ T1476] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10923'. [ 918.461925][ T1481] netlink: 'syz.4.10923': attribute type 10 has an invalid length. [ 918.545008][ T1479] device wlan0 left promiscuous mode [ 918.616420][ T1486] FAULT_INJECTION: forcing a failure. [ 918.616420][ T1486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.630152][ T1486] CPU: 1 PID: 1486 Comm: syz.5.10928 Not tainted syzkaller #0 [ 918.637615][ T1486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 918.647673][ T1486] Call Trace: [ 918.650955][ T1486] [ 918.653870][ T1486] dump_stack_lvl+0x188/0x250 [ 918.658543][ T1486] ? show_regs_print_info+0x20/0x20 [ 918.663726][ T1486] ? load_image+0x400/0x400 [ 918.668218][ T1486] ? __lock_acquire+0x7d10/0x7d10 [ 918.673237][ T1486] ? lockdep_hardirqs_on+0x94/0x140 [ 918.678431][ T1486] should_fail+0x38c/0x4c0 [ 918.682859][ T1486] _copy_from_user+0x2e/0x170 [ 918.687558][ T1486] perf_copy_attr+0x167/0x840 [ 918.692253][ T1486] __se_sys_perf_event_open+0xf5/0x1bb0 [ 918.697804][ T1486] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 918.703434][ T1486] ? syscall_enter_from_user_mode+0x2a/0x70 [ 918.709311][ T1486] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 918.714931][ T1486] do_syscall_64+0x4c/0xa0 [ 918.719330][ T1486] ? clear_bhb_loop+0x30/0x80 [ 918.724078][ T1486] ? clear_bhb_loop+0x30/0x80 [ 918.728765][ T1486] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 918.734652][ T1486] RIP: 0033:0x7fbedf10b629 [ 918.739084][ T1486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.758692][ T1486] RSP: 002b:00007fbedd365028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 918.767103][ T1486] RAX: ffffffffffffffda RBX: 00007fbedf384fa0 RCX: 00007fbedf10b629 [ 918.775063][ T1486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 918.783032][ T1486] RBP: 00007fbedd365090 R08: 0000000000000008 R09: 0000000000000000 [ 918.791013][ T1486] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 918.798987][ T1486] R13: 00007fbedf385038 R14: 00007fbedf384fa0 R15: 00007ffd68ec8038 [ 918.806959][ T1486] [ 919.105810][ T1495] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 919.122712][ T1495] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.163874][ T1495] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 919.222137][ T1494] device wg2 entered promiscuous mode [ 919.706627][ T1519] erspan0: refused to change device tx_queue_len [ 919.723703][ T1519] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 919.770408][ T1522] erspan0: refused to change device tx_queue_len [ 919.784795][ T1522] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 920.237613][ T1533] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 920.262424][ T1533] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.348637][ T1533] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 920.382528][ T1537] device wg2 entered promiscuous mode [ 920.606062][ T1549] FAULT_INJECTION: forcing a failure. [ 920.606062][ T1549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.634674][ T1549] CPU: 1 PID: 1549 Comm: syz.2.10950 Not tainted syzkaller #0 [ 920.642188][ T1549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.652256][ T1549] Call Trace: [ 920.655550][ T1549] [ 920.658490][ T1549] dump_stack_lvl+0x188/0x250 [ 920.663210][ T1549] ? show_regs_print_info+0x20/0x20 [ 920.668426][ T1549] ? load_image+0x400/0x400 [ 920.672944][ T1549] ? __lock_acquire+0x7d10/0x7d10 [ 920.677991][ T1549] should_fail+0x38c/0x4c0 [ 920.682427][ T1549] _copy_from_user+0x2e/0x170 [ 920.687120][ T1549] __sys_bpf+0x26d/0x6f0 [ 920.691377][ T1549] ? bpf_link_show_fdinfo+0x380/0x380 [ 920.696779][ T1549] __x64_sys_bpf+0x78/0x90 [ 920.701207][ T1549] do_syscall_64+0x4c/0xa0 [ 920.705633][ T1549] ? clear_bhb_loop+0x30/0x80 [ 920.710332][ T1549] ? clear_bhb_loop+0x30/0x80 [ 920.715017][ T1549] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 920.720927][ T1549] RIP: 0033:0x7f49df5e1629 [ 920.725357][ T1549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.744976][ T1549] RSP: 002b:00007f49dd83b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 920.753406][ T1549] RAX: ffffffffffffffda RBX: 00007f49df85afa0 RCX: 00007f49df5e1629 [ 920.761394][ T1549] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 0000000000000005 [ 920.769379][ T1549] RBP: 00007f49dd83b090 R08: 0000000000000000 R09: 0000000000000000 [ 920.777365][ T1549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.785358][ T1549] R13: 00007f49df85b038 R14: 00007f49df85afa0 R15: 00007ffe001d3b48 [ 920.793359][ T1549] [ 920.987278][ T1560] erspan0: refused to change device tx_queue_len [ 920.994592][ T1560] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 921.240457][ T1566] validate_nla: 10 callbacks suppressed [ 921.240489][ T1566] netlink: 'syz.2.10958': attribute type 13 has an invalid length. [ 921.280435][ T1571] netlink: 'syz.1.10960': attribute type 27 has an invalid length. [ 921.304639][ T1566] erspan0: refused to change device tx_queue_len [ 921.312588][ T1566] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 921.384274][ T1575] netlink: 'syz.4.10962': attribute type 10 has an invalid length. [ 921.430932][ T1575] __nla_validate_parse: 14 callbacks suppressed [ 921.430951][ T1575] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10962'. [ 921.475845][ T1575] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 921.511221][ T1575] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.602566][ T1575] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 921.620835][ T1582] netlink: 'syz.1.10964': attribute type 4 has an invalid length. [ 921.655861][ T1582] netlink: 168 bytes leftover after parsing attributes in process `syz.1.10964'. [ 921.707326][ T1585] device wlan0 left promiscuous mode [ 921.828538][ T1582] netlink: 'syz.1.10964': attribute type 10 has an invalid length. [ 921.840791][ T1582] netlink: 2 bytes leftover after parsing attributes in process `syz.1.10964'. [ 921.891965][ T1594] netlink: 'syz.5.10969': attribute type 10 has an invalid length. [ 921.928290][ T1596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10968'. [ 921.946026][ T1596] netlink: 'syz.2.10968': attribute type 1 has an invalid length. [ 921.966596][ T1596] netlink: 6 bytes leftover after parsing attributes in process `syz.2.10968'. [ 922.011638][ T1594] netlink: 'syz.5.10969': attribute type 13 has an invalid length. [ 922.052790][ T1594] netlink: 160 bytes leftover after parsing attributes in process `syz.5.10969'. [ 922.081702][ T1594] erspan0: refused to change device tx_queue_len [ 922.093945][ T1594] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 922.405030][ T1609] netlink: 'syz.0.10974': attribute type 13 has an invalid length. [ 922.428400][ T1609] netlink: 160 bytes leftover after parsing attributes in process `syz.0.10974'. [ 922.468332][ T1613] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.10975'. [ 922.492961][ T1609] erspan0: refused to change device tx_queue_len [ 922.520042][ T1609] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 922.725038][ T1623] netlink: 'syz.2.10977': attribute type 10 has an invalid length. [ 922.773756][ T1623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10977'. [ 923.348673][ T1640] FAULT_INJECTION: forcing a failure. [ 923.348673][ T1640] name failslab, interval 1, probability 0, space 0, times 0 [ 923.395776][ T1636] netlink: 160 bytes leftover after parsing attributes in process `syz.1.10983'. [ 923.402364][ T1640] CPU: 1 PID: 1640 Comm: syz.2.10985 Not tainted syzkaller #0 [ 923.412630][ T1640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.422701][ T1640] Call Trace: [ 923.424934][ T1636] erspan0: refused to change device tx_queue_len [ 923.425987][ T1640] [ 923.425998][ T1640] dump_stack_lvl+0x188/0x250 [ 923.426028][ T1640] ? show_regs_print_info+0x20/0x20 [ 923.426048][ T1640] ? load_image+0x400/0x400 [ 923.426071][ T1640] ? __lock_acquire+0x7d10/0x7d10 [ 923.426098][ T1640] should_fail+0x38c/0x4c0 [ 923.435181][ T1636] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 923.435459][ T1640] should_failslab+0x5/0x20 [ 923.435484][ T1640] slab_pre_alloc_hook+0x51/0xc0 [ 923.435504][ T1640] __kmalloc_node_track_caller+0x68/0x3a0 [ 923.435530][ T1640] ? sk_stream_alloc_skb+0x1fa/0xa60 [ 923.495561][ T1640] ? kmem_cache_alloc_node+0x162/0x2d0 [ 923.501013][ T1640] ? __alloc_skb+0xf4/0x750 [ 923.505519][ T1640] ? sk_stream_alloc_skb+0x1fa/0xa60 [ 923.510814][ T1640] __alloc_skb+0x22c/0x750 [ 923.515217][ T1640] sk_stream_alloc_skb+0x1fa/0xa60 [ 923.520311][ T1640] tcp_sendmsg_locked+0xc4e/0x35f0 [ 923.525433][ T1640] ? tcp_free_fastopen_req+0x70/0x70 [ 923.530699][ T1640] ? __local_bh_enable_ip+0x13e/0x1c0 [ 923.536067][ T1640] tcp_sendmsg+0x2b/0x40 [ 923.540377][ T1640] ? inet_send_prepare+0x260/0x260 [ 923.545472][ T1640] ____sys_sendmsg+0x5b7/0x8f0 [ 923.550231][ T1640] ? __sys_sendmsg_sock+0x30/0x30 [ 923.555331][ T1640] ? import_iovec+0x6f/0xa0 [ 923.559907][ T1640] ___sys_sendmsg+0x236/0x2e0 [ 923.564577][ T1640] ? __sys_sendmsg+0x2a0/0x2a0 [ 923.569333][ T1640] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 923.575152][ T1640] __se_sys_sendmsg+0x1af/0x290 [ 923.580006][ T1640] ? __x64_sys_sendmsg+0x80/0x80 [ 923.584931][ T1640] ? lockdep_hardirqs_on+0x94/0x140 [ 923.590142][ T1640] do_syscall_64+0x4c/0xa0 [ 923.594560][ T1640] ? clear_bhb_loop+0x30/0x80 [ 923.599223][ T1640] ? clear_bhb_loop+0x30/0x80 [ 923.603883][ T1640] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 923.609763][ T1640] RIP: 0033:0x7f49df5e1629 [ 923.614164][ T1640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.633842][ T1640] RSP: 002b:00007f49dd83b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.642246][ T1640] RAX: ffffffffffffffda RBX: 00007f49df85afa0 RCX: 00007f49df5e1629 [ 923.650205][ T1640] RDX: 0000000004009080 RSI: 0000200000000040 RDI: 0000000000000009 [ 923.658162][ T1640] RBP: 00007f49dd83b090 R08: 0000000000000000 R09: 0000000000000000 [ 923.666116][ T1640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.674072][ T1640] R13: 00007f49df85b038 R14: 00007f49df85afa0 R15: 00007ffe001d3b48 [ 923.682044][ T1640] [ 923.898862][ T1650] batman_adv: batadv0: Adding interface: vlan1 [ 923.912688][ T1650] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.001007][ T1650] batman_adv: batadv0: Interface activated: vlan1 [ 924.427307][ T1673] erspan0: refused to change device tx_queue_len [ 924.447920][ T1673] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 924.518514][ T1678] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 924.598231][ T1678] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 924.666755][ T1678] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 924.682101][ T1681] mac80211_hwsim hwsim53 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 925.666972][ T1712] erspan0: refused to change device tx_queue_len [ 925.714740][ T1712] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 928.521980][ T1744] validate_nla: 22 callbacks suppressed [ 928.522016][ T1744] netlink: 'syz.4.11021': attribute type 21 has an invalid length. [ 928.557283][ T1744] netlink: 'syz.4.11021': attribute type 1 has an invalid length. [ 928.573533][ T1744] __nla_validate_parse: 14 callbacks suppressed [ 928.573586][ T1744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11021'. [ 928.945233][ T1749] netlink: 'syz.5.11032': attribute type 21 has an invalid length. [ 928.967440][ T1749] netlink: 'syz.5.11032': attribute type 1 has an invalid length. [ 929.009005][ T1749] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11032'. [ 929.321998][ T1768] netlink: 'syz.1.11027': attribute type 10 has an invalid length. [ 929.355582][ T1768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11027'. [ 929.531657][ T1765] netlink: 'syz.0.11026': attribute type 13 has an invalid length. [ 929.608317][ T1765] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11026'. [ 929.867641][ T1765] erspan0: refused to change device tx_queue_len [ 930.019008][ T1765] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 930.531707][ T1783] netlink: 'syz.0.11042': attribute type 10 has an invalid length. [ 930.688147][ T1788] netlink: 'syz.0.11042': attribute type 13 has an invalid length. [ 930.743389][ T1788] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11042'. [ 930.775978][ T1788] erspan0: refused to change device tx_queue_len [ 930.813101][ T1788] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 930.950138][ T1793] netlink: 'syz.5.11035': attribute type 10 has an invalid length. [ 930.982388][ T1793] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11035'. [ 931.229726][ T1801] netlink: 'syz.0.11037': attribute type 21 has an invalid length. [ 931.306096][ T1801] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11037'. [ 931.378429][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.385005][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.778677][ T1819] FAULT_INJECTION: forcing a failure. [ 931.778677][ T1819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.882667][ T1819] CPU: 0 PID: 1819 Comm: syz.0.11045 Not tainted syzkaller #0 [ 931.890268][ T1819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 931.900339][ T1819] Call Trace: [ 931.903632][ T1819] [ 931.906569][ T1819] dump_stack_lvl+0x188/0x250 [ 931.911272][ T1819] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 931.917545][ T1819] ? show_regs_print_info+0x20/0x20 [ 931.922763][ T1819] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 931.928960][ T1819] ? dump_stack+0x5/0x20 [ 931.933233][ T1819] should_fail+0x38c/0x4c0 [ 931.937677][ T1819] _copy_from_user+0x2e/0x170 [ 931.942385][ T1819] iovec_from_user+0x142/0x370 [ 931.947168][ T1819] __import_iovec+0x70/0x490 [ 931.951783][ T1819] import_iovec+0x6f/0xa0 [ 931.956134][ T1819] ___sys_sendmsg+0x1fd/0x2e0 [ 931.960845][ T1819] ? __sys_sendmsg+0x2a0/0x2a0 [ 931.965663][ T1819] __se_sys_sendmsg+0x1af/0x290 [ 931.970535][ T1819] ? __x64_sys_sendmsg+0x80/0x80 [ 931.975499][ T1819] ? syscall_enter_from_user_mode+0x2a/0x70 [ 931.981406][ T1819] do_syscall_64+0x4c/0xa0 [ 931.985839][ T1819] ? clear_bhb_loop+0x30/0x80 [ 931.990522][ T1819] ? clear_bhb_loop+0x30/0x80 [ 931.995213][ T1819] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 932.001131][ T1819] RIP: 0033:0x7fbc9058a629 [ 932.005566][ T1819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.025442][ T1819] RSP: 002b:00007fbc8e7e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.033874][ T1819] RAX: ffffffffffffffda RBX: 00007fbc90803fa0 RCX: 00007fbc9058a629 [ 932.041870][ T1819] RDX: 0000000004009080 RSI: 0000200000000040 RDI: 0000000000000009 [ 932.049959][ T1819] RBP: 00007fbc8e7e4090 R08: 0000000000000000 R09: 0000000000000000 [ 932.057954][ T1819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.065949][ T1819] R13: 00007fbc90804038 R14: 00007fbc90803fa0 R15: 00007ffdbec60038 [ 932.073955][ T1819] [ 933.043957][ T1840] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11049'. [ 933.146058][ T1837] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11049'. [ 933.625184][ T1855] validate_nla: 5 callbacks suppressed [ 933.625217][ T1855] netlink: 'syz.1.11055': attribute type 21 has an invalid length. [ 933.712709][ T1864] FAULT_INJECTION: forcing a failure. [ 933.712709][ T1864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.731696][ T1855] netlink: 'syz.1.11055': attribute type 1 has an invalid length. [ 933.755321][ T1864] CPU: 0 PID: 1864 Comm: syz.0.11058 Not tainted syzkaller #0 [ 933.762826][ T1864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 933.772897][ T1864] Call Trace: [ 933.776187][ T1864] [ 933.779137][ T1864] dump_stack_lvl+0x188/0x250 [ 933.783049][ T1855] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11055'. [ 933.783875][ T1864] ? show_regs_print_info+0x20/0x20 [ 933.783904][ T1864] ? load_image+0x400/0x400 [ 933.783927][ T1864] ? __lock_acquire+0x7d10/0x7d10 [ 933.783953][ T1864] should_fail+0x38c/0x4c0 [ 933.783978][ T1864] _copy_from_user+0x2e/0x170 [ 933.816844][ T1864] __copy_msghdr_from_user+0xc9/0x630 [ 933.822238][ T1864] ? verify_lock_unused+0x140/0x140 [ 933.827464][ T1864] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 933.832785][ T1864] ___sys_sendmsg+0x19a/0x2e0 [ 933.837495][ T1864] ? __sys_sendmsg+0x2a0/0x2a0 [ 933.842288][ T1864] ? vfs_write+0x8b2/0xd60 [ 933.846743][ T1864] __se_sys_sendmsg+0x1af/0x290 [ 933.851624][ T1864] ? __x64_sys_sendmsg+0x80/0x80 [ 933.856577][ T1864] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 933.862579][ T1864] ? lockdep_hardirqs_on+0x94/0x140 [ 933.867875][ T1864] do_syscall_64+0x4c/0xa0 [ 933.872294][ T1864] ? clear_bhb_loop+0x30/0x80 [ 933.876956][ T1864] ? clear_bhb_loop+0x30/0x80 [ 933.881622][ T1864] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 933.887502][ T1864] RIP: 0033:0x7fbc9058a629 [ 933.891908][ T1864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.911502][ T1864] RSP: 002b:00007fbc8e7e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.919950][ T1864] RAX: ffffffffffffffda RBX: 00007fbc90803fa0 RCX: 00007fbc9058a629 [ 933.927915][ T1864] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 933.935876][ T1864] RBP: 00007fbc8e7e4090 R08: 0000000000000000 R09: 0000000000000000 [ 933.943838][ T1864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.951802][ T1864] R13: 00007fbc90804038 R14: 00007fbc90803fa0 R15: 00007ffdbec60038 [ 933.959771][ T1864] [ 933.965562][ T1861] netlink: 'syz.2.11057': attribute type 21 has an invalid length. [ 933.992841][ T1861] netlink: 'syz.2.11057': attribute type 1 has an invalid length. [ 934.057341][ T1861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11057'. [ 934.152041][ T1868] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11059'. [ 934.989793][ T1884] netlink: 'syz.0.11063': attribute type 49 has an invalid length. [ 935.436631][ T1893] netlink: 'syz.2.11066': attribute type 4 has an invalid length. [ 935.512473][ T1893] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11066'. [ 935.689334][ T1900] netlink: 'syz.2.11066': attribute type 10 has an invalid length. [ 935.783636][ T1900] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11066'. [ 935.851472][ T1907] netlink: 'syz.0.11071': attribute type 21 has an invalid length. [ 935.882913][ T1907] netlink: 'syz.0.11071': attribute type 1 has an invalid length. [ 935.916879][ T1907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11071'. [ 935.997230][ T1911] netlink: 'syz.1.11074': attribute type 21 has an invalid length. [ 936.030422][ T1911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11074'. [ 936.481062][ T1910] delete_channel: no stack [ 937.104880][ T1929] netlink: 160 bytes leftover after parsing attributes in process `syz.4.11081'. [ 937.158320][ T1929] erspan0: refused to change device tx_queue_len [ 937.262442][ T1929] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 937.439400][ T1940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11086'. [ 937.512526][ T1945] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11088'. [ 938.758970][ T1970] validate_nla: 9 callbacks suppressed [ 938.759005][ T1970] netlink: 'syz.0.11098': attribute type 10 has an invalid length. [ 938.830110][ T1970] netlink: 'syz.0.11098': attribute type 13 has an invalid length. [ 938.872775][ T1970] __nla_validate_parse: 3 callbacks suppressed [ 938.872808][ T1970] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11098'. [ 938.988920][ T1970] erspan0: refused to change device tx_queue_len [ 939.048952][ T1970] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 939.075226][ T1977] netlink: 'syz.5.11100': attribute type 21 has an invalid length. [ 939.106501][ T1977] netlink: 'syz.5.11100': attribute type 1 has an invalid length. [ 939.130154][ T1977] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11100'. [ 939.424162][ T1993] netlink: 'syz.0.11104': attribute type 10 has an invalid length. [ 939.432123][ T1993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11104'. [ 939.495772][ T1995] netlink: 'syz.4.11107': attribute type 4 has an invalid length. [ 939.522314][ T1995] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11107'. [ 939.653941][ T1995] netlink: 'syz.4.11107': attribute type 10 has an invalid length. [ 939.788843][ T1995] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11107'. [ 939.893272][ T2006] netlink: 'syz.0.11109': attribute type 10 has an invalid length. [ 940.023554][ T2006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11109'. [ 940.377946][ T2014] netlink: 'syz.1.11114': attribute type 10 has an invalid length. [ 940.430150][ T2014] netlink: 'syz.1.11114': attribute type 13 has an invalid length. [ 940.480215][ T2014] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11114'. [ 940.556841][ T2014] erspan0: refused to change device tx_queue_len [ 940.594751][ T2014] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 940.677641][ T2029] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11118'. [ 940.812064][ T2032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11119'. [ 941.108764][ T2052] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11125'. [ 942.073719][ T2071] erspan0: refused to change device tx_queue_len [ 942.080283][ T2071] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 942.984888][ T2110] tap0: tun_chr_ioctl cmd 1074025675 [ 942.990319][ T2110] tap0: persist enabled [ 943.037349][ T2110] tap0: tun_chr_ioctl cmd 1074025675 [ 943.060080][ T2110] tap0: persist enabled [ 943.289930][ T2116] erspan0: refused to change device tx_queue_len [ 943.297718][ T2116] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 943.868936][ T2143] FAULT_INJECTION: forcing a failure. [ 943.868936][ T2143] name failslab, interval 1, probability 0, space 0, times 0 [ 943.884490][ T2144] validate_nla: 18 callbacks suppressed [ 943.884526][ T2144] netlink: 'syz.2.11161': attribute type 21 has an invalid length. [ 943.903979][ T2144] netlink: 'syz.2.11161': attribute type 1 has an invalid length. [ 943.912102][ T2143] CPU: 1 PID: 2143 Comm: syz.4.11160 Not tainted syzkaller #0 [ 943.919573][ T2143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 943.929624][ T2143] Call Trace: [ 943.932893][ T2143] [ 943.935807][ T2143] dump_stack_lvl+0x188/0x250 [ 943.940477][ T2143] ? show_regs_print_info+0x20/0x20 [ 943.945660][ T2143] ? load_image+0x400/0x400 [ 943.950152][ T2143] ? __might_sleep+0xf0/0xf0 [ 943.954722][ T2143] ? __lock_acquire+0x7d10/0x7d10 [ 943.959729][ T2143] ? mark_lock+0x94/0x320 [ 943.964070][ T2143] should_fail+0x38c/0x4c0 [ 943.968482][ T2143] should_failslab+0x5/0x20 [ 943.972967][ T2143] slab_pre_alloc_hook+0x51/0xc0 [ 943.978006][ T2143] __kmalloc+0x6b/0x330 [ 943.982169][ T2143] ? tomoyo_realpath_from_path+0x118/0x610 [ 943.988143][ T2143] tomoyo_realpath_from_path+0x118/0x610 [ 943.993787][ T2143] tomoyo_path_number_perm+0x242/0x660 [ 943.999238][ T2143] ? verify_lock_unused+0x140/0x140 [ 944.004515][ T2143] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 944.009981][ T2143] ? ksys_write+0x1c6/0x260 [ 944.014503][ T2143] security_file_ioctl+0x6c/0xa0 [ 944.019429][ T2143] __se_sys_ioctl+0x48/0x170 [ 944.024003][ T2143] do_syscall_64+0x4c/0xa0 [ 944.028413][ T2143] ? clear_bhb_loop+0x30/0x80 [ 944.033074][ T2143] ? clear_bhb_loop+0x30/0x80 [ 944.037732][ T2143] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 944.043621][ T2143] RIP: 0033:0x7f694ed9d629 [ 944.048032][ T2143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.067627][ T2143] RSP: 002b:00007f694cff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.076023][ T2143] RAX: ffffffffffffffda RBX: 00007f694f016fa0 RCX: 00007f694ed9d629 [ 944.084022][ T2143] RDX: 0000000000000010 RSI: 00000000c004743e RDI: 0000000000000006 [ 944.092017][ T2143] RBP: 00007f694cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 944.100061][ T2143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.108017][ T2143] R13: 00007f694f017038 R14: 00007f694f016fa0 R15: 00007fff540ac2e8 [ 944.116015][ T2143] [ 944.145081][ T2144] __nla_validate_parse: 9 callbacks suppressed [ 944.145116][ T2144] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11161'. [ 944.211882][ T2143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 944.241406][ T2151] netlink: 'syz.0.11163': attribute type 4 has an invalid length. [ 944.260218][ T2151] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11163'. [ 944.286037][ T2150] netlink: 'syz.1.11164': attribute type 10 has an invalid length. [ 944.334339][ T2150] netlink: 'syz.1.11164': attribute type 13 has an invalid length. [ 944.372372][ T2150] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11164'. [ 944.399643][ T2150] erspan0: refused to change device tx_queue_len [ 944.441145][ T2150] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 944.495176][ T2163] netlink: 'syz.0.11163': attribute type 10 has an invalid length. [ 944.503705][ T2163] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11163'. [ 944.554783][ T2154] netlink: 'syz.4.11166': attribute type 10 has an invalid length. [ 944.572488][ T2154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11166'. [ 945.176307][ T2187] netlink: 'syz.0.11178': attribute type 2 has an invalid length. [ 945.198173][ T2187] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11178'. [ 945.731397][ T2209] netlink: 'syz.0.11188': attribute type 4 has an invalid length. [ 945.800400][ T2209] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11188'. [ 945.881794][ T2209] netlink: 'syz.0.11188': attribute type 10 has an invalid length. [ 945.936108][ T2209] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11188'. [ 946.855339][ T2245] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11203'. [ 947.087740][ T2263] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11212'. [ 947.106154][ T2265] FAULT_INJECTION: forcing a failure. [ 947.106154][ T2265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.134832][ T2265] CPU: 0 PID: 2265 Comm: syz.5.11211 Not tainted syzkaller #0 [ 947.142340][ T2265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 947.152419][ T2265] Call Trace: [ 947.155719][ T2265] [ 947.158666][ T2265] dump_stack_lvl+0x188/0x250 [ 947.163377][ T2265] ? show_regs_print_info+0x20/0x20 [ 947.168604][ T2265] ? load_image+0x400/0x400 [ 947.173137][ T2265] ? __might_sleep+0xf0/0xf0 [ 947.177770][ T2265] ? __lock_acquire+0x7d10/0x7d10 [ 947.182823][ T2265] ? mark_lock+0x94/0x320 [ 947.187179][ T2265] should_fail+0x38c/0x4c0 [ 947.191637][ T2265] copy_page_from_iter+0x33c/0x760 [ 947.196769][ T2265] pipe_write+0x96f/0x1aa0 [ 947.201190][ T2265] ? pipe_write+0x191/0x1aa0 [ 947.205806][ T2265] ? pipe_read+0x1260/0x1260 [ 947.210412][ T2265] ? end_current_label_crit_section+0x14b/0x170 [ 947.216741][ T2265] ? memset+0x1e/0x40 [ 947.220718][ T2265] ? iov_iter_init+0xb4/0x170 [ 947.225549][ T2265] vfs_write+0x745/0xd60 [ 947.229803][ T2265] ? file_end_write+0x250/0x250 [ 947.234671][ T2265] ? __fget_files+0x40f/0x480 [ 947.239371][ T2265] ? __fdget_pos+0x1e2/0x370 [ 947.243958][ T2265] ? ksys_write+0x71/0x260 [ 947.248392][ T2265] ksys_write+0x152/0x260 [ 947.252806][ T2265] ? __ia32_sys_read+0x80/0x80 [ 947.257590][ T2265] ? lockdep_hardirqs_on+0x94/0x140 [ 947.262930][ T2265] do_syscall_64+0x4c/0xa0 [ 947.267344][ T2265] ? clear_bhb_loop+0x30/0x80 [ 947.272014][ T2265] ? clear_bhb_loop+0x30/0x80 [ 947.276702][ T2265] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 947.282678][ T2265] RIP: 0033:0x7fbedf10b629 [ 947.287092][ T2265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.306804][ T2265] RSP: 002b:00007fbedd365028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 947.315237][ T2265] RAX: ffffffffffffffda RBX: 00007fbedf384fa0 RCX: 00007fbedf10b629 [ 947.323234][ T2265] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000000 [ 947.331211][ T2265] RBP: 00007fbedd365090 R08: 0000000000000000 R09: 0000000000000000 [ 947.339278][ T2265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.347266][ T2265] R13: 00007fbedf385038 R14: 00007fbedf384fa0 R15: 00007ffd68ec8038 [ 947.355266][ T2265] [ 947.698725][ T2282] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 948.042286][ T4224] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 948.848179][ T2315] erspan0: refused to change device tx_queue_len [ 948.883156][ T2315] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 948.901654][ T2320] validate_nla: 6 callbacks suppressed [ 948.901669][ T2320] netlink: 'syz.2.11232': attribute type 4 has an invalid length. [ 948.922691][ T2321] netlink: 'syz.4.11233': attribute type 10 has an invalid length. [ 948.952646][ T2321] netlink: 'syz.4.11233': attribute type 13 has an invalid length. [ 948.980538][ T2321] erspan0: refused to change device tx_queue_len [ 948.995204][ T2321] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 949.014201][ T2325] netlink: 'syz.2.11232': attribute type 10 has an invalid length. [ 949.184055][ T2328] netlink: 'syz.5.11236': attribute type 10 has an invalid length. [ 949.192809][ T2328] __nla_validate_parse: 7 callbacks suppressed [ 949.192825][ T2328] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11236'. [ 949.481722][ T1152] wlan1: Created IBSS using preconfigured BSSID 00:8d:ff:ff:00:00 [ 949.502252][ T1152] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 949.637177][ T2353] netlink: 'syz.0.11246': attribute type 10 has an invalid length. [ 949.754743][ T2354] netlink: 'syz.0.11246': attribute type 13 has an invalid length. [ 949.775408][ T2354] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11246'. [ 949.812611][ T2354] erspan0: refused to change device tx_queue_len [ 949.823430][ T2354] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 950.290146][ T2366] netlink: 'syz.1.11252': attribute type 10 has an invalid length. [ 950.330734][ T2366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11252'. [ 950.508916][ T2383] netlink: 'syz.4.11259': attribute type 4 has an invalid length. [ 950.590779][ T2383] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11259'. [ 950.725740][ T2383] netlink: 'syz.4.11259': attribute type 10 has an invalid length. [ 950.782829][ T2383] netlink: 2 bytes leftover after parsing attributes in process `syz.4.11259'. [ 951.174909][ T2397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11261'. [ 951.489511][ T2412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11268'. [ 951.599400][ T2417] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11271'. [ 951.662942][ T2417] erspan0: refused to change device tx_queue_len [ 951.690170][ T2417] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 952.123369][ T2443] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11280'. [ 952.209376][ T2447] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11279'. [ 952.740880][ T2462] erspan0: refused to change device tx_queue_len [ 952.841230][ T2462] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 953.182683][ T2472] erspan0: refused to change device tx_queue_len [ 953.240229][ T2472] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 953.530915][ T2501] erspan0: refused to change device tx_queue_len [ 953.542759][ T2500] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 953.549802][ T2501] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 954.586828][ T2532] validate_nla: 13 callbacks suppressed [ 954.586863][ T2532] netlink: 'syz.2.11308': attribute type 10 has an invalid length. [ 954.624016][ T2532] netlink: 'syz.2.11308': attribute type 13 has an invalid length. [ 954.649243][ T2532] __nla_validate_parse: 5 callbacks suppressed [ 954.649277][ T2532] netlink: 160 bytes leftover after parsing attributes in process `syz.2.11308'. [ 954.699888][ T2532] erspan0: refused to change device tx_queue_len [ 954.720067][ T2532] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 954.795179][ T2550] netlink: 'syz.1.11314': attribute type 10 has an invalid length. [ 954.830424][ T2550] netlink: 'syz.1.11314': attribute type 13 has an invalid length. [ 954.838952][ T2550] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11314'. [ 954.849786][ T2550] erspan0: refused to change device tx_queue_len [ 954.856834][ T2550] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 955.292248][ T2574] netlink: 'syz.5.11320': attribute type 10 has an invalid length. [ 955.358635][ T2574] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11320'. [ 955.526031][ T2590] netlink: 'syz.0.11328': attribute type 4 has an invalid length. [ 955.536685][ T2590] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11328'. [ 955.605998][ T2596] netlink: 'syz.0.11328': attribute type 10 has an invalid length. [ 955.640472][ T2596] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11328'. [ 955.703291][ T2591] netlink: 21 bytes leftover after parsing attributes in process `syz.5.11326'. [ 955.757011][ T2591] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 955.833665][ T2602] netlink: 'syz.1.11331': attribute type 10 has an invalid length. [ 955.851577][ T2602] netlink: 'syz.1.11331': attribute type 13 has an invalid length. [ 955.859807][ T2602] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11331'. [ 955.870056][ T2602] erspan0: refused to change device tx_queue_len [ 955.876687][ T2602] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 955.962672][ T2607] netlink: 'syz.4.11332': attribute type 10 has an invalid length. [ 955.995912][ T2607] netlink: 160 bytes leftover after parsing attributes in process `syz.4.11332'. [ 956.016199][ T2607] erspan0: refused to change device tx_queue_len [ 956.032417][ T2607] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 956.539558][ T2623] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11338'. [ 956.828170][ T2638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11345'. [ 957.884258][ T2697] erspan0: refused to change device tx_queue_len [ 957.893818][ T2697] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 958.135411][ T2721] device batadv_slave_1 entered promiscuous mode [ 958.154680][ T2721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.168317][ T2721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.744636][ T2745] erspan0: refused to change device tx_queue_len [ 958.786758][ T2745] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 959.592627][ T2792] validate_nla: 17 callbacks suppressed [ 959.592659][ T2792] netlink: 'syz.4.11392': attribute type 10 has an invalid length. [ 959.625387][ T2792] netlink: 'syz.4.11392': attribute type 13 has an invalid length. [ 959.647403][ T2792] erspan0: refused to change device tx_queue_len [ 959.656759][ T2792] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 959.854462][ T2800] netlink: 'syz.1.11396': attribute type 49 has an invalid length. [ 960.056002][ T2819] netlink: 'syz.0.11412': attribute type 4 has an invalid length. [ 960.084411][ T2819] __nla_validate_parse: 12 callbacks suppressed [ 960.084427][ T2819] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11412'. [ 960.207558][ T2819] netlink: 'syz.0.11412': attribute type 10 has an invalid length. [ 960.226370][ T2819] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11412'. [ 960.404092][ T2830] netlink: 'syz.1.11404': attribute type 10 has an invalid length. [ 960.413172][ T2830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11404'. [ 960.678778][ T2840] netlink: 'syz.4.11409': attribute type 10 has an invalid length. [ 960.761883][ T2840] netlink: 'syz.4.11409': attribute type 13 has an invalid length. [ 960.798485][ T2840] netlink: 160 bytes leftover after parsing attributes in process `syz.4.11409'. [ 960.878432][ T2840] erspan0: refused to change device tx_queue_len [ 960.906305][ T2840] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 961.037444][ T2844] netlink: 'syz.5.11411': attribute type 49 has an invalid length. [ 961.227771][ T2862] FAULT_INJECTION: forcing a failure. [ 961.227771][ T2862] name failslab, interval 1, probability 0, space 0, times 0 [ 961.256603][ T2862] CPU: 0 PID: 2862 Comm: syz.4.11418 Not tainted syzkaller #0 [ 961.264107][ T2862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 961.274175][ T2862] Call Trace: [ 961.277460][ T2862] [ 961.280390][ T2862] dump_stack_lvl+0x188/0x250 [ 961.285070][ T2862] ? fib_rules_unregister+0x340/0x340 [ 961.290436][ T2862] ? show_regs_print_info+0x20/0x20 [ 961.295625][ T2862] ? load_image+0x400/0x400 [ 961.300123][ T2862] ? mroute_clean_tables+0xad0/0xad0 [ 961.305394][ T2862] should_fail+0x38c/0x4c0 [ 961.309801][ T2862] should_failslab+0x5/0x20 [ 961.314292][ T2862] slab_pre_alloc_hook+0x51/0xc0 [ 961.319220][ T2862] ? skb_clone+0x1bd/0x350 [ 961.323623][ T2862] kmem_cache_alloc+0x3d/0x290 [ 961.328373][ T2862] skb_clone+0x1bd/0x350 [ 961.332725][ T2862] ? ip6_finish_output2+0x7f2/0x1510 [ 961.338022][ T2862] ip6_finish_output2+0x80a/0x1510 [ 961.343162][ T2862] ? nf_hook+0x360/0x360 [ 961.347416][ T2862] ? ip6_finish_output+0x64c/0x7d0 [ 961.352615][ T2862] ip6_send_skb+0x1b9/0x360 [ 961.357103][ T2862] udp_v6_send_skb+0xa28/0x1680 [ 961.362036][ T2862] udp_v6_push_pending_frames+0x1cc/0x320 [ 961.367772][ T2862] ? udp_v6_send_skb+0x1680/0x1680 [ 961.372880][ T2862] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 961.377727][ T2862] udpv6_sendmsg+0xee3/0x2650 [ 961.382393][ T2862] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 961.387231][ T2862] ? verify_lock_unused+0x140/0x140 [ 961.392416][ T2862] ? udp_v6_early_demux+0xec0/0xec0 [ 961.397615][ T2862] ? __lock_acquire+0x12e8/0x7d10 [ 961.402645][ T2862] ? aa_sk_perm+0x7dc/0x910 [ 961.407135][ T2862] ? aa_af_perm+0x340/0x340 [ 961.411718][ T2862] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 961.418118][ T2862] ? sock_rps_record_flow+0x17/0x3b0 [ 961.423397][ T2862] ? inet_send_prepare+0x58/0x260 [ 961.428411][ T2862] ? inet6_sendmsg+0x5b/0xd0 [ 961.432988][ T2862] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 961.438167][ T2862] ____sys_sendmsg+0x5b7/0x8f0 [ 961.442927][ T2862] ? __sys_sendmsg_sock+0x30/0x30 [ 961.447944][ T2862] ? import_iovec+0x6f/0xa0 [ 961.452521][ T2862] ___sys_sendmsg+0x236/0x2e0 [ 961.457276][ T2862] ? __sys_sendmsg+0x2a0/0x2a0 [ 961.462044][ T2862] ? vfs_write+0x8b2/0xd60 [ 961.466478][ T2862] __se_sys_sendmsg+0x1af/0x290 [ 961.471333][ T2862] ? __x64_sys_sendmsg+0x80/0x80 [ 961.476262][ T2862] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 961.482245][ T2862] ? lockdep_hardirqs_on+0x94/0x140 [ 961.487451][ T2862] do_syscall_64+0x4c/0xa0 [ 961.491865][ T2862] ? clear_bhb_loop+0x30/0x80 [ 961.496532][ T2862] ? clear_bhb_loop+0x30/0x80 [ 961.501193][ T2862] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 961.507084][ T2862] RIP: 0033:0x7f694ed9d629 [ 961.511514][ T2862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.531306][ T2862] RSP: 002b:00007f694cff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 961.539741][ T2862] RAX: ffffffffffffffda RBX: 00007f694f016fa0 RCX: 00007f694ed9d629 [ 961.547831][ T2862] RDX: 0000000000000080 RSI: 0000200000000240 RDI: 0000000000000003 [ 961.555794][ T2862] RBP: 00007f694cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 961.563782][ T2862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.571750][ T2862] R13: 00007f694f017038 R14: 00007f694f016fa0 R15: 00007fff540ac2e8 [ 961.579817][ T2862] [ 961.652865][ T2864] netlink: 'syz.5.11419': attribute type 10 has an invalid length. [ 961.694597][ T2864] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11419'. [ 962.141365][ T2886] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11426'. [ 962.251226][ T2888] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11426'. [ 962.356630][ T2895] netlink: 160 bytes leftover after parsing attributes in process `syz.5.11428'. [ 962.399763][ T2895] erspan0: refused to change device tx_queue_len [ 962.409652][ T2895] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 962.705171][ T2913] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11432'. [ 963.218343][ T2954] netlink: 160 bytes leftover after parsing attributes in process `syz.5.11442'. [ 963.253077][ T2954] erspan0: refused to change device tx_queue_len [ 963.259918][ T2954] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 964.567086][ T2999] erspan0: refused to change device tx_queue_len [ 964.586873][ T2999] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 965.034183][ T3030] validate_nla: 16 callbacks suppressed [ 965.034202][ T3030] netlink: 'syz.1.11467': attribute type 4 has an invalid length. [ 965.087122][ T3026] netlink: 'syz.4.11465': attribute type 49 has an invalid length. [ 965.137431][ T3033] netlink: 'syz.1.11467': attribute type 10 has an invalid length. [ 965.161214][ T3033] __nla_validate_parse: 7 callbacks suppressed [ 965.161232][ T3033] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11467'. [ 965.520379][ T3048] netlink: 'syz.5.11472': attribute type 10 has an invalid length. [ 965.538764][ T3044] netlink: 'syz.4.11470': attribute type 10 has an invalid length. [ 965.595234][ T3044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11470'. [ 965.623321][ T3048] netlink: 'syz.5.11472': attribute type 13 has an invalid length. [ 965.631929][ T3048] netlink: 160 bytes leftover after parsing attributes in process `syz.5.11472'. [ 965.681714][ T3048] erspan0: refused to change device tx_queue_len [ 965.708868][ T3048] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 966.298655][ T3076] netlink: 'syz.5.11482': attribute type 49 has an invalid length. [ 966.469610][ T3088] netlink: 'syz.0.11487': attribute type 10 has an invalid length. [ 966.494921][ T3086] netlink: 'syz.2.11486': attribute type 10 has an invalid length. [ 966.528840][ T3088] netlink: 'syz.0.11487': attribute type 13 has an invalid length. [ 966.537959][ T3088] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11487'. [ 966.560680][ T3088] erspan0: refused to change device tx_queue_len [ 966.571200][ T3088] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 966.589652][ T3093] netlink: 160 bytes leftover after parsing attributes in process `syz.2.11486'. [ 966.601972][ T3093] erspan0: refused to change device tx_queue_len [ 966.608526][ T3093] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 966.662550][ T3096] netlink: 168 bytes leftover after parsing attributes in process `syz.5.11491'. [ 966.682674][ T3099] netlink: 2 bytes leftover after parsing attributes in process `syz.5.11491'. [ 966.788835][ T3110] FAULT_INJECTION: forcing a failure. [ 966.788835][ T3110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.864931][ T3110] CPU: 1 PID: 3110 Comm: syz.1.11496 Not tainted syzkaller #0 [ 966.872986][ T3110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 966.883077][ T3110] Call Trace: [ 966.886390][ T3110] [ 966.889352][ T3110] dump_stack_lvl+0x188/0x250 [ 966.894200][ T3110] ? show_regs_print_info+0x20/0x20 [ 966.899437][ T3110] ? load_image+0x400/0x400 [ 966.904092][ T3110] ? __lock_acquire+0x7d10/0x7d10 [ 966.909171][ T3110] should_fail+0x38c/0x4c0 [ 966.913650][ T3110] _copy_from_user+0x2e/0x170 [ 966.918379][ T3110] ip6gre_tunnel_siocdevprivate+0x522/0xda0 [ 966.924338][ T3110] ? ip6gre_tunnel_init+0x160/0x160 [ 966.929576][ T3110] ? __mutex_trylock_common+0x155/0x260 [ 966.935238][ T3110] ? full_name_hash+0x8e/0xe0 [ 966.939968][ T3110] dev_ifsioc+0xa30/0xd50 [ 966.944336][ T3110] ? dev_ioctl+0xe30/0xe30 [ 966.948893][ T3110] ? full_name_hash+0x8e/0xe0 [ 966.953620][ T3110] dev_ioctl+0x5df/0xe30 [ 966.957883][ T3110] ? get_user_ifreq+0xc7/0x170 [ 966.962673][ T3110] sock_ioctl+0x691/0x710 [ 966.967041][ T3110] ? sock_poll+0x410/0x410 [ 966.971508][ T3110] ? bpf_lsm_file_ioctl+0x5/0x10 [ 966.976474][ T3110] ? security_file_ioctl+0x7c/0xa0 [ 966.981605][ T3110] ? sock_poll+0x410/0x410 [ 966.986036][ T3110] __se_sys_ioctl+0xfa/0x170 [ 966.990648][ T3110] do_syscall_64+0x4c/0xa0 [ 966.995077][ T3110] ? clear_bhb_loop+0x30/0x80 [ 966.999777][ T3110] ? clear_bhb_loop+0x30/0x80 [ 967.004576][ T3110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 967.010587][ T3110] RIP: 0033:0x7f072930c629 [ 967.015032][ T3110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.034743][ T3110] RSP: 002b:00007f0727566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 967.043180][ T3110] RAX: ffffffffffffffda RBX: 00007f0729585fa0 RCX: 00007f072930c629 [ 967.051165][ T3110] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 967.059142][ T3110] RBP: 00007f0727566090 R08: 0000000000000000 R09: 0000000000000000 [ 967.067128][ T3110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.075122][ T3110] R13: 00007f0729586038 R14: 00007f0729585fa0 R15: 00007ffdb63ef658 [ 967.083167][ T3110] [ 967.101222][ T3122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11500'. [ 967.295865][ T3133] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11505'. [ 967.354459][ T3133] erspan0: refused to change device tx_queue_len [ 967.377318][ T3133] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 967.425740][ T3140] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11509'. [ 968.409791][ T3181] FAULT_INJECTION: forcing a failure. [ 968.409791][ T3181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.415854][ T3175] erspan0: refused to change device tx_queue_len [ 968.453301][ T3181] CPU: 1 PID: 3181 Comm: syz.2.11524 Not tainted syzkaller #0 [ 968.460802][ T3181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 968.464160][ T3175] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 968.470868][ T3181] Call Trace: [ 968.470884][ T3181] [ 968.470892][ T3181] dump_stack_lvl+0x188/0x250 [ 968.470924][ T3181] ? show_regs_print_info+0x20/0x20 [ 968.470945][ T3181] ? load_image+0x400/0x400 [ 968.470967][ T3181] ? __lock_acquire+0x7d10/0x7d10 [ 968.470988][ T3181] ? aa_sk_perm+0x910/0x910 [ 968.471007][ T3181] should_fail+0x38c/0x4c0 [ 968.471032][ T3181] _copy_from_user+0x2e/0x170 [ 968.471053][ T3181] sock_setsockopt+0x2e5/0x24c0 [ 968.530481][ T3181] ? __sock_set_mark+0x150/0x150 [ 968.535430][ T3181] ? __lock_acquire+0x7d10/0x7d10 [ 968.540489][ T3181] ? aa_sk_perm+0x7dc/0x910 [ 968.544998][ T3181] ? aa_af_perm+0x340/0x340 [ 968.549504][ T3181] ? __fget_files+0x40f/0x480 [ 968.554190][ T3181] ? aa_sock_opt_perm+0x74/0x100 [ 968.559131][ T3181] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 968.564681][ T3181] ? security_socket_setsockopt+0x7a/0xa0 [ 968.570413][ T3181] __sys_setsockopt+0x2f6/0x3d0 [ 968.575285][ T3181] __x64_sys_setsockopt+0xb1/0xc0 [ 968.580364][ T3181] do_syscall_64+0x4c/0xa0 [ 968.584796][ T3181] ? clear_bhb_loop+0x30/0x80 [ 968.589485][ T3181] ? clear_bhb_loop+0x30/0x80 [ 968.594182][ T3181] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 968.600084][ T3181] RIP: 0033:0x7f49df5e1629 [ 968.604507][ T3181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.624121][ T3181] RSP: 002b:00007f49dd83b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 968.632633][ T3181] RAX: ffffffffffffffda RBX: 00007f49df85afa0 RCX: 00007f49df5e1629 [ 968.640623][ T3181] RDX: 0000000000000012 RSI: 0000000000000001 RDI: 0000000000000003 [ 968.648605][ T3181] RBP: 00007f49dd83b090 R08: 0000000000000004 R09: 0000000000000000 [ 968.656684][ T3181] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 968.664765][ T3181] R13: 00007f49df85b038 R14: 00007f49df85afa0 R15: 00007ffe001d3b48 [ 968.673248][ T3181] [ 969.221587][ T3217] FAULT_INJECTION: forcing a failure. [ 969.221587][ T3217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.271934][ T3217] CPU: 1 PID: 3217 Comm: syz.2.11535 Not tainted syzkaller #0 [ 969.279437][ T3217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 969.289503][ T3217] Call Trace: [ 969.292779][ T3217] [ 969.295701][ T3217] dump_stack_lvl+0x188/0x250 [ 969.300372][ T3217] ? show_regs_print_info+0x20/0x20 [ 969.305563][ T3217] ? load_image+0x400/0x400 [ 969.310060][ T3217] ? __lock_acquire+0x7d10/0x7d10 [ 969.315071][ T3217] should_fail+0x38c/0x4c0 [ 969.319479][ T3217] _copy_to_user+0x2e/0x130 [ 969.323967][ T3217] simple_read_from_buffer+0xe3/0x150 [ 969.329324][ T3217] proc_fail_nth_read+0x1a6/0x220 [ 969.334337][ T3217] ? proc_fault_inject_write+0x310/0x310 [ 969.339957][ T3217] ? fsnotify_perm+0x254/0x560 [ 969.344708][ T3217] ? proc_fault_inject_write+0x310/0x310 [ 969.350321][ T3217] vfs_read+0x301/0xd60 [ 969.354469][ T3217] ? kernel_read+0x1e0/0x1e0 [ 969.359047][ T3217] ? __fget_files+0x40f/0x480 [ 969.363714][ T3217] ? mutex_lock_nested+0x17/0x20 [ 969.368641][ T3217] ? __fdget_pos+0x2bf/0x370 [ 969.373304][ T3217] ? ksys_read+0x71/0x260 [ 969.377617][ T3217] ksys_read+0x152/0x260 [ 969.381955][ T3217] ? vfs_write+0xd60/0xd60 [ 969.386381][ T3217] ? lockdep_hardirqs_on+0x94/0x140 [ 969.391584][ T3217] do_syscall_64+0x4c/0xa0 [ 969.396404][ T3217] ? clear_bhb_loop+0x30/0x80 [ 969.401097][ T3217] ? clear_bhb_loop+0x30/0x80 [ 969.405965][ T3217] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 969.411864][ T3217] RIP: 0033:0x7f49df5a1ece [ 969.416276][ T3217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 969.435966][ T3217] RSP: 002b:00007f49dd83afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 969.444380][ T3217] RAX: ffffffffffffffda RBX: 00007f49dd83b6c0 RCX: 00007f49df5a1ece [ 969.452343][ T3217] RDX: 000000000000000f RSI: 00007f49dd83b0a0 RDI: 0000000000000004 [ 969.460320][ T3217] RBP: 00007f49dd83b090 R08: 0000000000000000 R09: 0000000000000000 [ 969.468298][ T3217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.476263][ T3217] R13: 00007f49df85b038 R14: 00007f49df85afa0 R15: 00007ffe001d3b48 [ 969.484245][ T3217] [ 969.627944][ T3222] erspan0: refused to change device tx_queue_len [ 969.635067][ T3222] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 970.391539][ T3252] validate_nla: 18 callbacks suppressed [ 970.391574][ T3252] netlink: 'syz.1.11551': attribute type 10 has an invalid length. [ 970.434328][ T3254] __nla_validate_parse: 8 callbacks suppressed [ 970.434347][ T3254] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11552'. [ 970.454609][ T3252] netlink: 'syz.1.11551': attribute type 13 has an invalid length. [ 970.483719][ T3252] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11551'. [ 970.506883][ T3252] erspan0: refused to change device tx_queue_len [ 970.514052][ T3252] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 970.562823][ T3254] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11552'. [ 970.624790][ T3257] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11552'. [ 970.644533][ T3261] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11552'. [ 970.677773][ T3260] netlink: 'syz.2.11553': attribute type 49 has an invalid length. [ 970.910291][ T3272] netlink: 'syz.0.11565': attribute type 49 has an invalid length. [ 971.185186][ T3291] netlink: 'syz.0.11564': attribute type 4 has an invalid length. [ 971.243070][ T3291] netlink: 168 bytes leftover after parsing attributes in process `syz.0.11564'. [ 971.437813][ T3299] netlink: 'syz.0.11564': attribute type 10 has an invalid length. [ 971.458112][ T3299] netlink: 2 bytes leftover after parsing attributes in process `syz.0.11564'. [ 971.869193][ T3308] netlink: 'syz.4.11571': attribute type 49 has an invalid length. [ 972.927349][ T3357] netlink: 'syz.1.11587': attribute type 4 has an invalid length. [ 972.953245][ T3357] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11587'. [ 972.978210][ T3351] netlink: 'syz.4.11585': attribute type 49 has an invalid length. [ 973.036414][ T3362] netlink: 'syz.1.11587': attribute type 10 has an invalid length. [ 973.093359][ T3362] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11587'. [ 974.439992][ T3411] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11607'. [ 974.500592][ T3411] openvswitch: netlink: Flow key attribute not present in set flow. [ 975.643195][ T3452] validate_nla: 4 callbacks suppressed [ 975.643228][ T3452] netlink: 'syz.4.11623': attribute type 10 has an invalid length. [ 975.710637][ T3452] netlink: 'syz.4.11623': attribute type 13 has an invalid length. [ 975.730379][ T3452] __nla_validate_parse: 2 callbacks suppressed [ 975.730413][ T3452] netlink: 160 bytes leftover after parsing attributes in process `syz.4.11623'. [ 975.825124][ T3452] erspan0: refused to change device tx_queue_len [ 975.831685][ T3452] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 976.060245][ T3464] netlink: 'syz.0.11627': attribute type 49 has an invalid length. [ 976.305842][ T3481] netlink: 'syz.0.11633': attribute type 10 has an invalid length. [ 976.331066][ T3484] netlink: 'syz.0.11633': attribute type 13 has an invalid length. [ 976.362572][ T3484] netlink: 160 bytes leftover after parsing attributes in process `syz.0.11633'. [ 976.399708][ T3484] erspan0: refused to change device tx_queue_len [ 976.420343][ T3484] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 976.440036][ T3488] FAULT_INJECTION: forcing a failure. [ 976.440036][ T3488] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 976.445169][ T3483] netlink: 'syz.1.11632': attribute type 10 has an invalid length. [ 976.463729][ T3483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11632'. [ 976.466694][ T3488] CPU: 1 PID: 3488 Comm: syz.4.11635 Not tainted syzkaller #0 [ 976.481144][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 976.491207][ T3488] Call Trace: [ 976.494494][ T3488] [ 976.497436][ T3488] dump_stack_lvl+0x188/0x250 [ 976.502140][ T3488] ? show_regs_print_info+0x20/0x20 [ 976.507598][ T3488] ? load_image+0x400/0x400 [ 976.512270][ T3488] ? __lock_acquire+0x7d10/0x7d10 [ 976.517418][ T3488] ? mark_lock+0x94/0x320 [ 976.521872][ T3488] should_fail+0x38c/0x4c0 [ 976.526313][ T3488] prepare_alloc_pages+0x1e4/0x5f0 [ 976.531545][ T3488] __alloc_pages+0x11b/0x480 [ 976.536142][ T3488] ? zone_statistics+0x170/0x170 [ 976.541082][ T3488] ? verify_lock_unused+0x140/0x140 [ 976.546281][ T3488] ? perf_trace_lock_acquire+0xed/0x3e0 [ 976.551946][ T3488] alloc_pages_vma+0x393/0x7c0 [ 976.556815][ T3488] wp_page_copy+0x21e/0x2050 [ 976.561587][ T3488] ? do_wp_page+0x902/0xad0 [ 976.566227][ T3488] ? insert_page_into_pte_locked+0x480/0x480 [ 976.572239][ T3488] ? do_raw_spin_unlock+0x11d/0x230 [ 976.577466][ T3488] ? _raw_spin_unlock+0x24/0x40 [ 976.582395][ T3488] ? do_wp_page+0x902/0xad0 [ 976.586894][ T3488] handle_mm_fault+0x1f06/0x4410 [ 976.591828][ T3488] ? get_page+0xe0/0xe0 [ 976.595968][ T3488] ? mark_lock+0x94/0x320 [ 976.600289][ T3488] ? vmacache_find+0x238/0x590 [ 976.605042][ T3488] ? find_vma+0xd2/0x230 [ 976.609276][ T3488] do_user_addr_fault+0x489/0xc80 [ 976.614305][ T3488] exc_page_fault+0x60/0x100 [ 976.618883][ T3488] ? __might_fault+0xb7/0x110 [ 976.623594][ T3488] asm_exc_page_fault+0x22/0x30 [ 976.628777][ T3488] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 976.635364][ T3488] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 976.654959][ T3488] RSP: 0018:ffffc90003467678 EFLAGS: 00050206 [ 976.661042][ T3488] RAX: ffffffff83e18901 RBX: 0000000000000d24 RCX: 0000000000000d24 [ 976.669007][ T3488] RDX: 0000000000000d24 RSI: ffff8880a6036150 RDI: 0000200000002a80 [ 976.676965][ T3488] RBP: ffffc900034677e0 R08: ffff8880a6036e73 R09: 1ffff11014c06dce [ 976.684933][ T3488] R10: dffffc0000000000 R11: ffffed1014c06dcf R12: ffff8880a6036150 [ 976.692892][ T3488] R13: dffffc00000000ff R14: 0000200000002a80 R15: 0000000000000000 [ 976.700945][ T3488] ? _copy_to_iter+0x271/0x1180 [ 976.705814][ T3488] _copy_to_iter+0x318/0x1180 [ 976.710503][ T3488] ? __lock_acquire+0x7d10/0x7d10 [ 976.715539][ T3488] ? iov_iter_init+0x170/0x170 [ 976.720307][ T3488] ? __virt_addr_valid+0x3c6/0x470 [ 976.725412][ T3488] ? __phys_addr_symbol+0x2b/0x70 [ 976.730422][ T3488] ? __check_object_size+0x30c/0x410 [ 976.735702][ T3488] __skb_datagram_iter+0xde/0x740 [ 976.740751][ T3488] ? tsk_importance+0x150/0x150 [ 976.745606][ T3488] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 976.751150][ T3488] ? tipc_wait_for_rcvmsg+0x640/0x640 [ 976.756514][ T3488] skb_copy_datagram_iter+0xad/0x1f0 [ 976.761879][ T3488] tipc_recvmsg+0x7c8/0x1400 [ 976.766631][ T3488] ? tipc_send_packet+0x90/0x90 [ 976.771521][ T3488] ? aa_sock_msg_perm+0x94/0x150 [ 976.776459][ T3488] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 976.781737][ T3488] ? security_socket_recvmsg+0x85/0xb0 [ 976.787188][ T3488] ? tipc_send_packet+0x90/0x90 [ 976.792025][ T3488] ____sys_recvmsg+0x2cd/0x5e0 [ 976.796784][ T3488] ? __might_fault+0xb3/0x110 [ 976.801561][ T3488] ? __sys_recvmsg_sock+0x40/0x40 [ 976.806601][ T3488] ? import_iovec+0x6f/0xa0 [ 976.811121][ T3488] ___sys_recvmsg+0x21a/0x5c0 [ 976.815918][ T3488] ? __sys_recvmsg+0x280/0x280 [ 976.820782][ T3488] ? __lock_acquire+0x7d10/0x7d10 [ 976.826038][ T3488] __x64_sys_recvmsg+0x1f9/0x2c0 [ 976.830984][ T3488] ? ___sys_recvmsg+0x5c0/0x5c0 [ 976.835826][ T3488] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 976.841842][ T3488] ? lockdep_hardirqs_on+0x94/0x140 [ 976.847123][ T3488] do_syscall_64+0x4c/0xa0 [ 976.851531][ T3488] ? clear_bhb_loop+0x30/0x80 [ 976.856244][ T3488] ? clear_bhb_loop+0x30/0x80 [ 976.860922][ T3488] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 976.866925][ T3488] RIP: 0033:0x7f694ed9d629 [ 976.871981][ T3488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.892031][ T3488] RSP: 002b:00007f694cff7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 976.900646][ T3488] RAX: ffffffffffffffda RBX: 00007f694f016fa0 RCX: 00007f694ed9d629 [ 976.908647][ T3488] RDX: 0000000000010021 RSI: 0000200000000300 RDI: 0000000000000003 [ 976.918003][ T3488] RBP: 00007f694cff7090 R08: 0000000000000000 R09: 0000000000000000 [ 976.925969][ T3488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.933931][ T3488] R13: 00007f694f017038 R14: 00007f694f016fa0 R15: 00007fff540ac2e8 [ 976.941909][ T3488] [ 977.044326][ T3457] chnl_net:caif_netlink_parms(): no params data found [ 977.195248][ T3509] netlink: 'syz.2.11640': attribute type 10 has an invalid length. [ 977.224325][ T3509] netlink: 'syz.2.11640': attribute type 13 has an invalid length. [ 977.236173][ T3509] netlink: 160 bytes leftover after parsing attributes in process `syz.2.11640'. [ 977.257473][ T3509] erspan0: refused to change device tx_queue_len [ 977.273002][ T3509] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 977.300952][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.311472][ T3457] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.343083][ T3457] device bridge_slave_0 entered promiscuous mode [ 977.354726][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.364279][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.395477][ T3457] device bridge_slave_1 entered promiscuous mode [ 977.501118][ T3520] netlink: 'syz.1.11642': attribute type 49 has an invalid length. [ 977.519870][ T3457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.543360][ T3457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.596039][ T3457] team0: Port device team_slave_0 added [ 977.607480][ T3457] team0: Port device team_slave_1 added [ 977.643056][ T3457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.671471][ T3457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.721010][ T3457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 977.761345][ T3457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 977.779599][ T3457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.847815][ T3457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.852506][ T1106] Bluetooth: hci0: command 0x0409 tx timeout [ 978.009685][ T3457] device hsr_slave_0 entered promiscuous mode [ 978.063301][ T3457] device hsr_slave_1 entered promiscuous mode [ 978.100157][ T3457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.121745][ T3457] Cannot create hsr debugfs directory [ 978.504746][ T3457] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.531971][ T3571] netlink: 'syz.2.11663': attribute type 10 has an invalid length. [ 978.563250][ T3571] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11663'. [ 978.601427][ T3576] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11665'. [ 978.653931][ T3457] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.822044][ T3457] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.934148][ T3600] netlink: 168 bytes leftover after parsing attributes in process `syz.1.11675'. [ 978.979755][ T3457] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.061938][ T3607] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11675'. [ 979.131068][ T3606] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11678'. [ 979.343274][ T3457] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 979.375523][ T3457] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 979.416337][ T3457] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 979.445755][ T3457] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 979.760722][ T3457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.801180][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 979.819533][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 979.846116][ T3457] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.913937][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 979.930242][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 979.938989][ T5373] Bluetooth: hci0: command 0x041b tx timeout [ 979.977505][T20929] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.984712][T20929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.040893][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 980.075810][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 980.100915][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 980.156063][ T1510] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.163293][ T1510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.198754][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 980.224793][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 980.264163][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 980.295173][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 980.338044][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 980.436374][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 980.445712][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 980.455921][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 980.464917][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 980.478102][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 980.493259][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 980.517898][ T3457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 980.790932][ T3658] validate_nla: 4 callbacks suppressed [ 980.790964][ T3658] netlink: 'syz.1.11695': attribute type 10 has an invalid length. [ 981.000417][ T3658] netlink: 'syz.1.11695': attribute type 13 has an invalid length. [ 981.022933][ T3658] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11695'. [ 981.045051][ T3658] erspan0: refused to change device tx_queue_len [ 981.051592][ T3658] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 981.104534][ T3457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.120422][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 981.153322][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 981.192343][ T3655] netlink: 'syz.2.11694': attribute type 10 has an invalid length. [ 981.213653][ T3655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11694'. [ 981.365485][ T3666] netlink: 'syz.4.11698': attribute type 10 has an invalid length. [ 981.395435][ T3666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11698'. [ 981.765874][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 981.785744][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 981.827029][ T3693] netlink: 'syz.4.11707': attribute type 10 has an invalid length. [ 981.859131][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 981.878578][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 981.897897][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 981.913376][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 981.941328][ T3693] netlink: 'syz.4.11707': attribute type 13 has an invalid length. [ 981.961483][ T3693] netlink: 160 bytes leftover after parsing attributes in process `syz.4.11707'. [ 981.991562][ T3693] erspan0: refused to change device tx_queue_len [ 982.009563][ T3693] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 982.012973][ T4330] Bluetooth: hci0: command 0x040f tx timeout [ 982.040010][ T3457] device veth0_vlan entered promiscuous mode [ 982.097408][ T3457] device veth1_vlan entered promiscuous mode [ 982.141198][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 982.161998][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 982.189359][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 982.207642][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 982.234509][ T3457] device veth0_macvtap entered promiscuous mode [ 982.265307][ T3457] device veth1_macvtap entered promiscuous mode [ 982.323298][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 982.333051][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 982.355076][ T3457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.382790][ T3457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.423880][ T3457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.442382][ T3457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.456589][ T3457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.474558][ T3457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.485665][ T3457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.497247][ T3457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.518978][ T3457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.540898][ T3715] netlink: 'syz.2.11714': attribute type 10 has an invalid length. [ 982.570210][ T3715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11714'. [ 982.607630][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 982.626501][ T1152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 982.673825][ T3457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.702038][ T3457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.735545][ T3457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.746595][ T3457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.757412][ T3457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.768339][ T3457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.779274][ T3457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 982.792281][ T3457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.811455][ T3457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.840876][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 982.882046][T20929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 982.920555][ T3457] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.920590][ T3457] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.920617][ T3457] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.920642][ T3457] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.991384][ T3740] netlink: 'syz.4.11722': attribute type 10 has an invalid length. [ 983.094757][ T3740] netlink: 'syz.4.11722': attribute type 13 has an invalid length. [ 983.112464][ T3740] netlink: 160 bytes leftover after parsing attributes in process `syz.4.11722'. [ 983.125199][ T3740] erspan0: refused to change device tx_queue_len [ 983.131875][ T3740] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 983.193432][ T1510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.201390][ T1510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.260308][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 983.296632][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.330548][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.351100][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 983.486713][ T3760] netlink: 'syz.1.11730': attribute type 10 has an invalid length. [ 983.533519][ T3760] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11730'. [ 983.826153][ T3773] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11735'. [ 983.854044][ T3773] erspan0: refused to change device tx_queue_len [ 983.860567][ T3773] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 984.100439][ T1106] Bluetooth: hci0: command 0x0419 tx timeout [ 984.462647][ T3798] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11745'. [ 984.479742][ T3798] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 984.487217][ T3798] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.523792][ T3798] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 984.678725][ T3805] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11748'. [ 984.691265][ T3805] erspan0: refused to change device tx_queue_len [ 984.698114][ T3805] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 984.725415][ T3778] chnl_net:caif_netlink_parms(): no params data found [ 984.929744][ T3778] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.937110][ T3778] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.946376][ T3778] device bridge_slave_0 entered promiscuous mode [ 985.009919][ T3778] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.042300][ T3778] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.088767][ T3778] device bridge_slave_1 entered promiscuous mode [ 985.180289][ T3778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.259414][ T3778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.506175][ T3778] team0: Port device team_slave_0 added [ 985.524869][ T3778] team0: Port device team_slave_1 added [ 985.531467][ T3848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 985.615266][ T3848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.651269][ T3848] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 985.684537][ T3860] erspan0: refused to change device tx_queue_len [ 985.691138][ T3860] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 985.730623][ T3778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 985.748058][ T3778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.787873][ T3778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 985.808581][ T3851] validate_nla: 7 callbacks suppressed [ 985.808598][ T3851] netlink: 'syz.4.11764': attribute type 49 has an invalid length. [ 985.871342][ T3778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.881648][ T3778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.961791][ T3778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.013175][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 986.065935][ T3778] device hsr_slave_0 entered promiscuous mode [ 986.077667][ T3778] device hsr_slave_1 entered promiscuous mode [ 986.108171][ T3778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.116109][ T3778] Cannot create hsr debugfs directory [ 986.400616][ T3778] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.534901][ T3896] netlink: 'syz.1.11780': attribute type 10 has an invalid length. [ 986.591354][ T3778] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.650316][ T3896] netlink: 'syz.1.11780': attribute type 13 has an invalid length. [ 986.650810][ T3904] FAULT_INJECTION: forcing a failure. [ 986.650810][ T3904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.690061][ T3896] __nla_validate_parse: 1 callbacks suppressed [ 986.690091][ T3896] netlink: 160 bytes leftover after parsing attributes in process `syz.1.11780'. [ 986.707335][ T3904] CPU: 1 PID: 3904 Comm: syz.5.11782 Not tainted syzkaller #0 [ 986.714821][ T3904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 986.715659][ T3896] erspan0: refused to change device tx_queue_len [ 986.724988][ T3904] Call Trace: [ 986.725005][ T3904] [ 986.725013][ T3904] dump_stack_lvl+0x188/0x250 [ 986.725040][ T3904] ? show_regs_print_info+0x20/0x20 [ 986.725058][ T3904] ? load_image+0x400/0x400 [ 986.725079][ T3904] ? __lock_acquire+0x7d10/0x7d10 [ 986.725097][ T3904] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 986.725117][ T3904] should_fail+0x38c/0x4c0 [ 986.725143][ T3904] strncpy_from_user+0x32/0x360 [ 986.725172][ T3904] getname_flags+0xef/0x500 [ 986.725195][ T3904] do_sys_openat2+0xdd/0x4b0 [ 986.725211][ T3904] ? __lock_acquire+0x7d10/0x7d10 [ 986.725233][ T3904] ? do_sys_open+0xe0/0xe0 [ 986.725250][ T3904] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 986.725269][ T3904] ? lock_chain_count+0x20/0x20 [ 986.725284][ T3904] ? vtime_user_exit+0x2c8/0x3e0 [ 986.725308][ T3904] __x64_sys_openat+0x135/0x160 [ 986.725330][ T3904] do_syscall_64+0x4c/0xa0 [ 986.725347][ T3904] ? clear_bhb_loop+0x30/0x80 [ 986.725364][ T3904] ? clear_bhb_loop+0x30/0x80 [ 986.725382][ T3904] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 986.725400][ T3904] RIP: 0033:0x7fed20012ece [ 986.725420][ T3904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 986.725434][ T3904] RSP: 002b:00007fed1e2abec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 986.725455][ T3904] RAX: ffffffffffffffda RBX: 00007fed1e2ac6c0 RCX: 00007fed20012ece [ 986.725468][ T3904] RDX: 0000000000000002 RSI: 00007fed1e2abf90 RDI: ffffffffffffff9c [ 986.725481][ T3904] RBP: 00007fed1e2ac090 R08: 0000000000000000 R09: 0000000000000000 [ 986.735248][ T3896] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 986.738216][ T3904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.738235][ T3904] R13: 00007fed202cc038 R14: 00007fed202cbfa0 R15: 00007ffc5c24fc98 [ 986.738262][ T3904] [ 986.956382][ T3900] netlink: 'syz.4.11781': attribute type 10 has an invalid length. [ 986.974876][ T3900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11781'. [ 987.011485][ T3909] netlink: 'syz.5.11783': attribute type 10 has an invalid length. [ 987.041483][ T3909] netlink: 2 bytes leftover after parsing attributes in process `syz.5.11783'. [ 987.064067][ T3909] device batadv_slave_1 entered promiscuous mode [ 987.097623][ T3909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.111404][ T3909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.147838][ T3778] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.197935][ T3912] netlink: 'syz.2.11784': attribute type 49 has an invalid length. [ 987.240311][ T3778] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.417330][ T3778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 987.460811][ T3778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 987.494376][ T3778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 987.537770][ T3778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 987.814140][ T3778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.855192][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 987.866580][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 987.884015][ T3778] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.896831][ T3947] netlink: 'syz.5.11796': attribute type 10 has an invalid length. [ 987.921279][ C1] [ 987.921289][ C1] ================================ [ 987.921294][ C1] WARNING: inconsistent lock state [ 987.921313][ C1] syzkaller #0 Not tainted [ 987.921321][ C1] -------------------------------- [ 987.921325][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 987.921332][ C1] syz.1.11798/3952 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 987.921348][ C1] ffff88805dc26a38 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 987.921391][ C1] {INITIAL USE} state was registered at: [ 987.921397][ C1] lock_acquire+0x19e/0x400 [ 987.921418][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 987.921432][ C1] trie_update_elem+0xc7/0xc50 [ 987.921445][ C1] bpf_map_update_value+0x57d/0x650 [ 987.921459][ C1] generic_map_update_batch+0x52d/0x7d0 [ 987.921473][ C1] bpf_map_do_batch+0x466/0x600 [ 987.921487][ C1] __sys_bpf+0x671/0x6f0 [ 987.921501][ C1] __x64_sys_bpf+0x78/0x90 [ 987.921514][ C1] do_syscall_64+0x4c/0xa0 [ 987.921527][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 987.921540][ C1] irq event stamp: 890 [ 987.921546][ C1] hardirqs last enabled at (889): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 987.921565][ C1] hardirqs last disabled at (890): [] exc_debug+0x6e/0x130 [ 987.921582][ C1] softirqs last enabled at (392): [] bpf_prog_load+0x10f9/0x1510 [ 987.921603][ C1] softirqs last disabled at (390): [] bpf_ksym_add+0x29/0x340 [ 987.921620][ C1] [ 987.921620][ C1] other info that might help us debug this: [ 987.921625][ C1] Possible unsafe locking scenario: [ 987.921625][ C1] [ 987.921630][ C1] CPU0 [ 987.921634][ C1] ---- [ 987.921636][ C1] lock(&trie->lock); [ 987.921647][ C1] [ 987.921651][ C1] lock(&trie->lock); [ 987.921660][ C1] [ 987.921660][ C1] *** DEADLOCK *** [ 987.921660][ C1] [ 987.921663][ C1] no locks held by syz.1.11798/3952. [ 987.921670][ C1] [ 987.921670][ C1] stack backtrace: [ 987.921675][ C1] CPU: 1 PID: 3952 Comm: syz.1.11798 Not tainted syzkaller #0 [ 987.921691][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.921700][ C1] Call Trace: [ 987.921706][ C1] <#DB> [ 987.921713][ C1] dump_stack_lvl+0x188/0x250 [ 987.921734][ C1] ? show_regs_print_info+0x20/0x20 [ 987.921755][ C1] ? print_usage_bug+0x42a/0x690 [ 987.921770][ C1] ? verify_lock_unused+0x18/0x140 [ 987.921789][ C1] lock_acquire+0x2c3/0x400 [ 987.921809][ C1] ? trie_delete_elem+0x90/0x710 [ 987.921826][ C1] ? read_lock_is_recursive+0x10/0x10 [ 987.921843][ C1] ? perf_swevent_get_recursion_context+0xda/0x150 [ 987.921862][ C1] ? look_up_lock_class+0x71/0x110 [ 987.921879][ C1] ? verify_lock_unused+0x18/0x140 [ 987.921898][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 987.921913][ C1] ? trie_delete_elem+0x90/0x710 [ 987.921928][ C1] ? _raw_spin_lock+0x40/0x40 [ 987.921943][ C1] ? rcu_lock_acquire+0x9/0x30 [ 987.921961][ C1] trie_delete_elem+0x90/0x710 [ 987.921979][ C1] ? rcu_is_watching+0x11/0xa0 [ 987.921994][ C1] ? lock_release+0xb5/0x8a0 [ 987.922014][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x358 [ 987.922029][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 987.922047][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 987.922071][ C1] ? perf_event_switch_output+0x730/0x730 [ 987.922093][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 987.922111][ C1] __perf_event_overflow+0x364/0x530 [ 987.922131][ C1] perf_swevent_event+0x4ad/0x530 [ 987.922147][ C1] perf_bp_event+0x276/0x320 [ 987.922159][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 987.922176][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 987.922201][ C1] ? rcu_lock_acquire+0x9/0x30 [ 987.922217][ C1] ? read_lock_is_recursive+0x10/0x10 [ 987.922236][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 987.922253][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 987.922270][ C1] notify_die+0x141/0x1a0 [ 987.922295][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 987.922313][ C1] ? exc_debug+0x6e/0x130 [ 987.922329][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 987.922350][ C1] notify_debug+0x20/0x30 [ 987.922367][ C1] exc_debug+0xcf/0x130 [ 987.922384][ C1] asm_exc_debug+0x1a/0x40 [ 987.922399][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 987.922420][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 987.922434][ C1] RSP: 0018:ffffc9000407fd80 EFLAGS: 00050202 [ 987.922449][ C1] RAX: ffffffff83e3c901 RBX: 0000000000000080 RCX: 000000000000007c [ 987.922460][ C1] RDX: 0000000000000080 RSI: 0000200000000304 RDI: ffffc9000407fe04 [ 987.922472][ C1] RBP: 0000000000000000 R08: ffffc9000407fe7f R09: 1ffff9200080ffcf [ 987.922483][ C1] R10: dffffc0000000000 R11: fffff5200080ffd0 R12: 00007ffffffff000 [ 987.922494][ C1] R13: 0000200000000380 R14: ffffc9000407fe00 R15: 0000200000000300 [ 987.922509][ C1] ? refcount_dec_and_lock_irqsave+0xe1/0xf0 [ 987.922535][ C1] [ 987.922539][ C1] [ 987.922544][ C1] _copy_from_user+0xfa/0x170 [ 987.922561][ C1] __sys_bpf+0x26d/0x6f0 [ 987.922578][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 987.922606][ C1] __x64_sys_bpf+0x78/0x90 [ 987.922623][ C1] do_syscall_64+0x4c/0xa0 [ 987.922637][ C1] ? clear_bhb_loop+0x30/0x80 [ 987.922651][ C1] ? clear_bhb_loop+0x30/0x80 [ 987.922667][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 987.922683][ C1] RIP: 0033:0x7f072930c629 [ 987.922696][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.922709][ C1] RSP: 002b:00007f0727566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 987.922725][ C1] RAX: ffffffffffffffda RBX: 00007f0729585fa0 RCX: 00007f072930c629 [ 987.922737][ C1] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 987.922747][ C1] RBP: 00007f07293a2b39 R08: 0000000000000000 R09: 0000000000000000 [ 987.922761][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 987.922771][ C1] R13: 00007f0729586038 R14: 00007f0729585fa0 R15: 00007ffdb63ef658 [ 987.922793][ C1] [ 988.537346][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 988.553793][ T3954] netlink: 'syz.5.11796': attribute type 13 has an invalid length. [ 988.561945][ T3954] netlink: 160 bytes leftover after parsing attributes in process `syz.5.11796'. [ 988.571534][ T3954] erspan0: refused to change device tx_queue_len [ 988.578051][ T3954] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 988.635809][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 988.659084][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 988.667602][T21464] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.674797][T21464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.682579][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 988.691574][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 988.700377][T21464] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.707501][T21464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.716478][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 988.726111][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 988.743641][ T3949] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.791817][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.798961][ T3960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.807739][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 988.821101][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 988.830619][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 988.839969][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 988.848689][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 988.857322][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 988.869103][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 988.877780][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 988.888355][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 988.897925][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 988.909407][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 989.008083][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 989.015771][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 989.031303][ T3778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.047799][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 989.056887][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 989.076671][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 989.086409][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 989.095152][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 989.103486][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 989.113885][ T3778] device veth0_vlan entered promiscuous mode [ 989.127412][ T3778] device veth1_vlan entered promiscuous mode [ 989.146125][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 989.154746][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 989.163523][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 989.172769][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.185001][ T3778] device veth0_macvtap entered promiscuous mode [ 989.194699][ T3778] device veth1_macvtap entered promiscuous mode [ 989.207624][ T3778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.219318][ T3778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.229972][ T3778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.240701][ T3778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.251028][ T3778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.261757][ T3778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.271819][ T3778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.282837][ T3778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.293998][ T3778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.303778][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 989.312091][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 989.320367][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 989.330339][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.341631][ T3778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.352433][ T3778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.362524][ T3778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.373789][ T3778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.383715][ T3778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.394316][ T3778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.404456][ T3778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.415587][ T3778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.427452][ T3778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.437278][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 989.446273][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 989.459438][ T3778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.468954][ T3778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.478005][ T3778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.487309][ T3778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.515943][ T3778] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht' [ 989.537858][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.546121][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.547151][ T3778] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht' [ 989.561547][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 989.583455][ T1510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.591309][ T1510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.598995][T21464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 990.653381][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 992.733599][ T1106] Bluetooth: hci3: command 0x0419 tx timeout [ 992.813961][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.820287][ T1421] ieee802154 phy1 wpan1: encryption failed: -22